HSTS, CSP, COOP, and CORP are active in production.
Ctrl Alt Grow
Security & growth
SECURITY THAT SELLS. MARKETING THAT PROVES IT.
Cybersecurity, compliance, and marketing for companies that want growth based on data, not guesswork.
Track record
Experience and standards you can verify.
No hidden scripts, no performance theater. Check for yourself.
15+ in IT security & DevOps, 10+ in marketing.
No cookies, no analytics, and no marketing pixels.
SOC 2, ISO 27001, HIPAA, NIS2, and DORA: gap analysis, controls, and audit prep.
Ctrl Alt Grow d.o.o.
Practitioners.
Practitioners.
Not theorists.
Ante runs security and compliance, Elena runs marketing — you work directly with us, no layers, no
theory.
Compliance sells. A SOC 2 report closes enterprise deals, an ISO 27001 page gets you past procurement. For B2B buyers, security and marketing are the same job.
What we do
Security. Marketing. One team.
Security: from gap analysis to audit prep. Marketing: from strategy to campaigns. Both done by us, not subcontracted.
Founder-led delivery
Analysis and implementation
One team for security and growth
Security + growth
Let's talk
Combined package
Compliance that converts. Security that sells. One team for both.
Security & Compliance
led by Ante Projić
For teams that need security and compliance without the theory and hand-waving.
Most requested
CISO-as-a-Service
Security leadership without a full-time CISO hire.
AI Consulting & Automation
AI that fits how you already work. Automation, internal tools, and integration that cuts real cost.
SOC 2 / ISO 27001 / HIPAA / NIS2 / DORA
Gap analysis, controls, documentation, and audit prep for teams that need the work done properly.
DevOps & Cloud
Infrastructure, CI/CD, monitoring, and cloud architecture. Built by the same person securing it.
Marketing & Growth
led by Elena Vian Projić
For teams that need sharper positioning, a clearer path to sale, and growth you can measure week over week.
Strategy & Budgeting
Channel-level budget allocation, quarterly ROI tracking. If it doesn't convert, it gets cut.
Social & Social Ads
Meta and LinkedIn campaigns with precise targeting — you pay for clients, not impressions.
Newsletter & Retention
Email sales flows for welcome, nurture, and win-back.
Creative & Planning
Content calendar, visuals, and copy. All built around sales goals, not the trend of the day.
Split, Croatia. Not Silicon Valley, not London. And that's exactly why — we understand you.
Our team
Work directly with us.
No juniors, no handoffs. We personally lead every project.
AP
Ante Projić
CISO · Lecturer · Security · AI · Cloud · DevOps
15+ years in IT. Former Head of DevOps at a telecom, now CISO. He built the systems he now secures.
Since 2018, he has taught Cloud Computing and Information Security. He built an ISMS from scratch —
first for a bank, then for an AI startup. He guides clients through compliance, from gap analysis to
first audit. AI only goes in where it earns its place, not where it's trending.
EVP
Elena Vian Projić
Marketing Manager · Strategy · Growth
10+ years in marketing for Croatian B2B and B2C companies. Co-founder of Ajme Portal, a Split-based
lifestyle publication read across Croatia. Built it from an idea into a returning audience. No ad goes
live until the offer converts. Strategy before tactics, always. Growth is measured in sales, not
impressions.
Open the console.
Run a check yourself.
Five checks below. Click one, or type its number into the console. Your browser runs it live, right here, and prints what it sees. No third-party calls. Paste the snippet into DevTools and you'll get the same answer.
Everything's open.A+
SECURITY HEADERS
HSTS · CSP · COOP · CORP · COEP
○ click to verify
0
EXTERNAL REQUESTS
no scripts · no pixels · no fonts
○ click to verify
0 / 0
COOKIES · STORAGE
no tracking state on this machine
○ click to verify
501
E2E TESTS
github actions · last run green
● ci · green
L5
· 75 all-checks
AGENT-NATIVE
content profile · 100 / 100
○ prereqs + scanner ↗
welcome ⌁ this is a real shell. each check below runs a real
browser API.
type a number, click a button, copy a snippet — verify any claim yourself.
external verify ↗
isitagentready.com
L5 / 100 · content profile
securityheaders.com
A+ grade
hstspreload.org
preload list
AI-authored. Every line.
Human supervised.
Frequently asked
You ask.
You ask.
We answer straight.
Do small companies need a full-time CISO or is fractional enough?
Rarely. CISO-as-a-Service gives you the same expert and the same accountability, without the salary, equity, or three-month notice period.
What does SOC 2, ISO 27001, NIS2, or DORA readiness include?
Everything the auditor asks for: gap analysis, control implementation, and the documentation nobody wants to write. Covers SOC 2, ISO 27001, HIPAA, NIS2 Directive readiness for essential and important entities, and DORA readiness for EU financial-sector clients.
Who runs the projects: founders or juniors?
We do. Founders only. Ante handles security and compliance, Elena handles marketing. You're talking to us.
Do you work with companies outside Croatia?
Yes. From Split we help companies and startups in Croatia, the EU, and the United States, in both Croatian and English, remote by default.
What if I only need marketing, not security?
Then you work with Elena. She runs marketing: strategy, campaigns, sales. Ante only joins in if you want compliance to show up in your sales story too. You don't have to take both.
CTRL+ALT+ CONTACT.
Split-based · Croatia and EU projects
Have a project, a problem, or a rough idea? We respond within 24 hours.
No cookies
No tracking
Reply within 24h
Email
Phone
Send a short brief. We'll reply with concrete next steps.