Network
Design & Hygiene
The complete picture of your corporate network. What's on it, who talks to whom, where the risk lives.
Your network grew
without a blueprint.
Every year you add devices, cameras, printers, IoT, smart TVs, another switch, one more access point.
Nobody ever stopped everything to ask: "what does it actually look like, today?"
of SMBs have devices on the LAN that IT never declared in the inventory
have a guest WiFi network that can see the corporate LAN
have never produced a real map of network flows
average cost of a breach enabled by weak segmentation (IBM 2024)
The point: you can't protect, optimize or right-size what you can't see. A documented network is worth ten firewalls configured by gut feeling.
A live diagram of your network: inventory, topology, status of every node.
Five questions, one documented answer
The audit answers the questions every IT manager asks but never has time to verify. Professional techniques, raw data delivered in the clear.
What's there
Full inventory: servers, clients, IoT, printers, cameras, ghost devices.
Who talks to whom
Real flow map between devices and segments. Useless, suspicious, or dangerous traffic.
How it's segmented
VLAN, subnets, guest/IoT isolation, DMZ. Where segmentation is missing or ineffective.
Is WiFi safe?
SSIDs, rogue APs, coverage, client isolation. WPS, WPA3, mixed mode.
Misconfig?
Legacy protocols, rogue DHCP, unmanaged IPv6, exposed management plane.
What you find
in the report.
Each finding includes severity, technical evidence, concrete recommendation, estimated effort.
€0
€0
€0
€0
€0
5 days, from kickoff to delivery
Audit fully on-premise. No tools of ours installed at your site, no data of yours leaving the building — raw data physically stays with you on an encrypted drive, we keep only the report PDF.
Kickoff
Walkthrough with IT, scope, NDA, access. Inventory automation kicks off in the background.
Topology + WiFi
SNMP/LLDP discovery on managed switches, walk-around for wireless coverage and rogue AP detection.
Traffic capture
Mirror port on the core switch. 24-48h of real flows: who talks to whom, when, how much.
Misconfig analysis
Run checks (DHCP, DNS, IPv6, STP, legacy). Findings prioritized by severity and effort.
Report + handover
PDF + AS-IS/TO-BE diagrams + walkthrough session with the customer's IT. Same-day teardown.
Four clear boundaries, both ways.
The mutual guarantees of Munin Network. Two things we don't do by deliberate design, and two rules on data and tooling that protect both you and us.
Vulnerability scanning (CVE)
No scanning of known vulnerabilities (OpenVAS, Nessus). That's a separate audit with its own methodology and timeline.
Penetration testing
No active exploitation, no exploits, no brute-force. Zero risk of disrupting your production environment.
Your raw data never leaves your LAN
Captures, scans, logs and pcaps stay physically with you on an encrypted drive (LUKS) handed over at the end of the audit. Verifiable wipe of our laptops in front of your IT team. We keep only the report PDF (the contractual deliverable, no credentials, no flows).
No tools of ours installed in your systems
All scans run from our own laptops (Kali). Zero footprint on your infrastructure. The tools we use are standard open source (nmap, Zeek, Kismet, ntopng, NetAlertX) — declared up front in scope. What we sell is method, experience, analysis.
Your report becomes technical evidence for NIS2 / GDPR / ISO 27001 audits.
Why now
NIS2 transposed in Italy on October 4, 2024 (D.Lgs 138/2024) and rolling out across the EU. Applies to SMBs in "essential" and "important" sectors above 50 employees / €10M.
Your enterprise customers (automotive, food brands, public healthcare) are already sending you compliance questionnaires — and you don't know what to answer.
The Big 4 quote €50,000+ for a NIS2 audit. Local MSPs lack compliance expertise. SaaS vendors (Auvik, Domotz) export raw data with no regulatory mapping.
A complete vacuum at the SMB level. We fill it.
What we add to the report
Compliance Mapping
Every finding mapped to specific controls in NIS2 art. 21, ISO 27001:2022 Annex A, GDPR art. 30/32.
2-page board summary
Business language, concise gap analysis, proposed decisions. For people who won't read the 25 technical pages.
Structured XML / JSON export
Findings + mapping in CycloneDX-compatible format. Importable into GRC tools (Drata, Vanta, OneTrust).
Extended session with DPO/CISO
Compliance-specific Q&A, translation of technical findings into documented conformity.
Support on supply-chain questionnaire responses
When an enterprise customer sends you a NIS2 questionnaire after the audit, we help you respond using our report as the reference.
Transparent, fixed, no surprises
Three standard packages. For multi-site or special cases, custom scope.
Up to 50 devices
Single site, 1 VLAN or flat
- ✓ 3 days on-site
- ✓ PDF report + diagrams
- ✓ 1h final walkthrough
Up to 200 devices
Multi-VLAN, corporate WiFi
- ✓ 5 days on-site
- ✓ PDF report + AS-IS/TO-BE
- ✓ 48h traffic capture
- ✓ Full WiFi survey
- ✓ 2h walkthrough + Q&A
200+ devices / multi-site
Branch, MPLS, SD-WAN
- ✓ Multiple coordinated sites
- ✓ 30-day follow-up included
- ✓ Multi-year roadmap
+ NIS2 / GDPR Compliance Readiness
Compliance Mapping + 2pp Executive + Evidence pack + Extended 4h walkthrough + 30-day follow-up
15% discount on annual recurring audit · 50/50 payment (kickoff/delivery)
Ready to see
what your network really looks like?
Free 30-minute call to figure out if Munin Network is a fit. We define scope, timing, and whether the NIS2 tier makes sense. No commitment, no SDR pitch.
Request a call
Fields marked * are required. Reply within 24h.
Munin Network · © 2026 Munin Network