Services

Human-led penetration testing of web apps and APIs. OWASP coverage and beyond.

Human-led testing of REST, GraphQL and SOAP APIs, from authentication to business logic.

A deep dive into your cloud configuration, across AWS, Azure, GCP, and more.

A configuration review of your Microsoft 365 tenant: identity, Conditional Access, email and collaboration.

Human-led penetration testing of applications built on large language models: chatbots, assistants, agents and the systems they connect to.

Security testing of iOS and Android applications and their supporting APIs.

Security testing of servers, workstations, routers, and switches. Internally or internet-facing.

An advanced offensive security assessment that follows a potential attacker's path from foothold to full compromise.

Testing of virtual desktop and published application environments, including breakouts from restricted sessions.

A security review of your key devices, including servers and corporate laptops or desktops.

A manual review of your firewall rulesets, firmware, and configuration.

Testing of the authentication, encryption, and segmentation of your wireless networks.

For development teams. The attacker's perspective on web applications so engineers understand how attacks take place and build more secure applications from the start.

For the people who run the network. How infrastructure is attacked and hardened, hands on, against the same weaknesses we find in internal assessments.

For everyone else. Hacker motivations, social engineering and phishing, physical security, remote working, wireless, passwords and multi-factor. Delivered by ethical hackers with a live demo, not a slide deck of rules.

For the people who will be on the call. Planning and preparation, the essential processes, and best practice for responding to a live incident, hosted remotely or on site.

An independent review of how your organisation approaches security: policy, risk and asset management, user accounts, hardening, vulnerability management, detection, and response and recovery.

A half-day incident response workshop, a review of your current plan, and development of the documentation that improves your response maturity, including scenario-specific playbooks.

Exercise the plan against realistic scenarios so the response team builds muscle memory before it's needed. Hosted remotely or on site, with a debrief of what worked and what didn't.