Services

Human-led penetration testing of web apps and APIs. OWASP coverage and beyond.

Security testing of servers, workstations, routers, and switches. Internally or internet-facing.

A deep dive into your cloud configuration, across AWS, Azure, GCP, and more.

Security testing of iOS and Android applications and their supporting APIs.

Testing of the authentication, encryption, and segmentation of your wireless networks.

A manual review of your firewall rulesets, firmware, and configuration.

A security review of your key devices, including servers and corporate laptops or desktops.

For development teams. The attacker's perspective on web applications so engineers understand how attacks take place and build more secure applications from the start.

For the people who run the network. How infrastructure is attacked and hardened, hands on, against the same weaknesses we find in internal assessments.

For everyone else. Hacker motivations, social engineering and phishing, physical security, remote working, wireless, passwords and multi-factor. Delivered by ethical hackers with a live demo, not a slide deck of rules.

For the people who will be on the call. Planning and preparation, the essential processes, and best practice for responding to a live incident, hosted remotely or on site.

An independent review of how your organisation approaches security: policy, risk and asset management, user accounts, hardening, vulnerability management, detection, and response and recovery.

A half-day incident response workshop, a review of your current plan, and development of the documentation that improves your response maturity, including scenario-specific playbooks.

Exercise the plan against realistic scenarios so the response team builds muscle memory before it's needed. Hosted remotely or on site, with a debrief of what worked and what didn't.