Building cyber resilience · Bishkek

We secure
what matters most

30+
organizations protected
24/7
monitoring & incident response
#17
team B4 worldwide, CTFtime
Free consultation
About us

A homegrown
cybersecurity team.

Blueberry protects the digital infrastructure of financial institutions, government bodies, telecom operators and businesses of any scale. We specialize in offensive security, vulnerability management and the practical defense of enterprise systems. The team brings together specialists with international certifications in offensive and defensive security, audit and risk management.

Partner status
Exclusive partner of TSARKA in Kyrgyzstan
Blueberry LLC is the exclusive partner and representative of TSARKA (Republic of Kazakhstan) in the Kyrgyz Republic.
Industry expertise
Banking & fintechThreat monitoring, online-banking channel protection, NBKR compliance.
TelecomNetwork infrastructure security, subscriber personal-data protection.
GovernmentProtection of critical infrastructure and state information systems.
EnterpriseEnterprise-grade end-to-end protection, dedicated teams.
SaaS & ITAppSec, DevSecOps, cloud service protection.
22 international certifications
held by the team
offensive · defensive · audit · forensics
OSCP / OSCP+OSEPOSWEOSWAOSWPCRTOCRTECRTPCPTSCPTA V2BSCPCBBHCEHCISSPCISAISO Lead AuditoreCDFPeWPTXeMAPTCMPen-AndroidAPISECCCNAv7
Services · 01 Directions

We think like attackers.
We defend like professionals.

10 services across four layers. Pick one to see the outcome.

01
Offensive
02
Defensive
03
Compliance
04
People
report / 01Offensive
Penetration Testing

We simulate real-world attacks against your external perimeter, internal network, and web and mobile apps — finding exploitable vulnerabilities before adversaries do.

> outcome
A report with prioritized findings, proof of exploitation and remediation guidance. Re-test after fixes.
ExternalInternalWeb / Mobile
Services · 02 Process

Recon. Attack. Report.

01
Recon & scope

We define goals, boundaries and scenarios, and map the attack surface: domains, services, leaks, employees.

02
Attack & defense

We test with real-world techniques while checking how your monitoring and team respond.

03
Report & plan

Prioritized findings, proof and a step-by-step remediation plan. Re-test after fixes.

blueberry@soc: ~/engagement
$
Services · 03 SOC · Live

We see everything.
Around the clock.

The monitoring center ingests events from your infrastructure, filters out the noise and escalates real incidents to the on-duty response team.

SOC
Event collection & correlation
online
CSIRT
On-duty response shift
ready
Threat Intelligence
Dark web, malware, industry campaigns
active
Blue Team
Detection rules & threat hunting
active
Services · 04 Compliance

Ready for any audit.
Any regulator.

ISO/IEC 27001SWIFT CSPPCI DSSNIST CSF
Security Audit
A gap map and a risk-based improvement roadmap.
ISO 27001
ISMS implementation and support through certification.
SWIFT Assessment
A CSCF controls opinion for banks.
PCI DSS
Preparing payment infrastructure and processing.
Community

Team B4

Bishkek Bureau of Binary Bandits — the CTF team of the Blueberry community, competing under the flag of Kyrgyzstan. First place in Central Asia.

#17
worldwide, CTFtime
562 664
points as of 16 Sep 2026
17
CTFtime — world ranking
#1 in Kyrgyzstan & Central Asia
flag{world_17}
T20
DEF CON CTF Qualifiers
The only team from the region in the top 20
flag{defcon_quals}
1
OmniCTF Quals
2809 points, ~800 teams
flag{omni_first}
F
OmniCTF Final
Constanța, Romania — 12 teams
flag{constanta}
2
TJCTF
flag{tj_2nd}
5
UMDCTF
flag{umd_5th}
5
DalCTF
flag{dal_5th}
7
KubSTU CTF
flag{kubstu_7th}

Ready to strengthen
your defenses?

A free consultation with a certified specialist.

AddressKyrgyz Republic, Bishkek, 80 Yunusaliev St