Vulnerability scanning and penetration testing

About Seemarter Security

Seemarter Security is the brand of Seemarter Güvenlik Teknolojileri A.Ş., a security services company in Istanbul, Türkiye. We make organisations' attack surface visible through vulnerability scanning and penetration testing. We verify findings with expert review and report only real, exploitable risks, in order of priority.

Our penetration testing team includes experts holding the OSCP and TSE Certified Penetration Testing Specialist certifications.

For our own advertising we plan to use an internal tool, Seemarter Ads Reporting, which reads reports from Seemarter's single Google Ads account through the Google Ads API. It is not offered to anyone else; see "Privacy: Google API data" below.

Services

Four scanning services and eleven testing services. Service details are available in Turkish at seemarter.com.

• S/01 External Network Vulnerability Scanning
• S/02 Internal Network Vulnerability Scanning
• S/03 Web Application Security Scanning
• S/04 Cloud Configuration Assessment
• T/01 Red Team Testing
• T/02 External Network Penetration Testing
• T/03 Internal Network Penetration Testing
• T/04 Web Application Penetration Testing
• T/05 Wireless Network Security Testing
• T/06 Social Engineering Testing
• T/07 DDoS (Distributed Denial of Service) Testing
• T/08 Mobile Application Security Testing
• T/09 Source Code Analysis
• T/10 Web Load Testing
• T/11 API Security Testing

Contact

• Company: Seemarter Güvenlik Teknolojileri A.Ş.
• Address: Kayabaşı Mh. Bozcaada Cd. No:12/B, Kayaşehir, 34494 Başakşehir / İstanbul, Türkiye
• E-mail: [email protected]
• Phone: +90 212 709 73 24 (calls are answered by an AI assistant; see "Privacy: this website")
• Office hours: weekdays 09:00–19:00, Istanbul time

Privacy: Google API data

Seemarter plans to use an internal tool called "Seemarter Ads Reporting" only to report on and manage its own Google Ads account. The tool is used only by the Seemarter team, for Seemarter's single Google Ads account; it does not access the Google accounts of website visitors or of our clients. This section applies once the tool is in use.

The tool accesses the Google Ads API with the OAuth permission granted by the account owner's Google account, using only the https://www.googleapis.com/auth/adwords scope. Data read: account structure and settings; campaign, ad group, keyword and ad texts; aggregated performance and conversion metrics; and search terms. Search terms are queries typed by people who saw our ads and may occasionally contain personal information. Customer lists, enhanced conversion data and visitors' e-mail addresses or phone numbers are not read. Any change to the account (for example, adding a negative keyword) is made only with the account owner's explicit approval.

This data is used only to report on and improve Seemarter's own advertising. OAuth credentials are stored only in the encrypted keychain on Seemarter's administrator computer. API responses are not saved to files; during a working session they are processed with Claude Code, an AI-assisted tool of Anthropic PBC (USA). Summaries containing only aggregated metrics and decision notes are kept in a private repository on the infrastructure of GitHub, Inc. (USA).

Data received from Google APIs is not shared with third parties, sold, or used for advertising or profiling. Seemarter Ads Reporting's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Access granted to the tool can be revoked in the account owner's Google Account under third-party access (myaccount.google.com/permissions); for questions about this section, write to [email protected]. When access is revoked, the locally stored credentials are also deleted.

Privacy: this website

A summary of our Turkish Privacy Policy (seemarter.com/gizlilik-politikasi) and KVKK information notice (seemarter.com/kvkk-aydinlatma-metni). In case of discrepancy, the Turkish Privacy Policy prevails.

• Contact and appointment forms: your name, e-mail, company, title, phone and message are stored on our server (Hetzner Online GmbH, Germany) to answer your request. With your optional consent, a reply draft is prepared on the infrastructure of Hugging Face, Inc. and DeepInfra, Inc. (USA) after your identity and contact details are removed.
• Bot protection: Cloudflare Turnstile (Cloudflare, Inc., USA) runs on the forms only after you give the cross-border transfer consent.
• Phone line and chat: answered by an AI assistant. Conversations are processed by ElevenLabs, Inc. (USA) and an AI model of Google LLC (USA); a short summary, with numbers and e-mail addresses masked, is kept for six months. On the phone, your voice is processed in real time to transcribe it, to decide when the assistant speaks (taking into account how you speak, such as intonation, emphasis and emotional cues), and to avoid treating background speech as yours; people speaking near you may still appear in the transcript and the summary. Voice recordings and full transcripts are not kept on our site.
• Appointments: the calendar link passes your name and e-mail to Calendly LLC (USA) when you open it.
• Team notes: a masked summary of requests, appointments and calls is shared in a closed group of our team on Telegram (Telegram Messenger Inc., outside the EEA).
• E-mail campaigns: replies to our Explee e-mail campaigns are processed on the infrastructure of Hugging Face, Inc. and DeepInfra, Inc. (USA) to prepare reply drafts, which are kept for 30 days.
• Cookieless analytics: Cloudflare Web Analytics (Cloudflare, Inc., USA) measures page views without cookies.
• Cookies: on our Turkish pages, Google Ads conversion measurement, Google Analytics 4 and remarketing (Google LLC, USA) load only for the categories you choose in the cookie banner. This English page loads no Google tags.
• Cross-border transfers: several of the providers above are in the USA or outside the EEA; each transfer relies on your explicit consent or our legitimate interest, as described in the KVKK information notice.
• Your rights: under Article 11 of the Turkish Personal Data Protection Law (KVKK) you can request information about, correction or deletion of your personal data by writing to [email protected].