Pentests that go beyond the scanner.
Senior practitioners manually validate weaknesses, chain them across trust boundaries, and demonstrate business impact within agreed rules of engagement.
The SoW fixes objectives, assets, access, test windows, team, and delivery dates.
Engagements start at €5.5K; final price follows a 30-minute scoping call.
One scoped retest of remediated, in-scope findings is included under the SoW.
Coverage across your in-scope attack surface.
Web Applications & APIs
- Authentication and authorisation, including privilege escalation, JWT, OAuth 2.0, and broken access control
- Injection, server-side flaws, and business-logic abuse across multi-step workflows
- REST, GraphQL, gRPC, SPA, and server-rendered application attack surfaces
Network & Infrastructure
- Active Directory and identity attack paths through to domain compromise
- Cloud, containers, and Kubernetes: IAM, control-plane, isolation, and secret exposure
- Perimeter, VPN, segmentation, DMZ, and wireless security validation
Mobile & Embedded
- iOS and Android source, binary, local-storage, IPC, and backend API review
- Embedded and IoT firmware, hardware interfaces, bootloaders, and update mechanisms
- Windows, macOS, and Linux desktop applications, services, drivers, and kernel modules
Evidence-driven. Repeatable. Auditable.
A NIST SP 800-115-aligned process, with reproduction evidence for every reported finding.
Scoping & Intelligence
- Confirm objectives, assets, access level, test windows, exclusions, and escalation contacts
- Establish the threat and external-exposure baseline relevant to the scope
Reconnaissance
- Enumerate services, identities, integrations, and trust relationships
- Prioritise paths by exposure, exploitability, and business impact
Exploitation & Chain Development
- Manually validate weaknesses and chain them toward agreed objectives
- Demonstrate impact within the rules of engagement without unnecessary disruption
Reporting & Retest
- Deliver reproducible findings, an executive readout, and prioritised remediation
- Complete one scoped retest under the SoW and update the report or validation letter
What ships in your scoped delivery.
Technical Report
- CVSSv4-scored findings with reproduction evidence
- Attack-chain and MITRE ATT&CK mapping where relevant
- Prioritised, owner-ready remediation guidance
Compliance Artifacts
- Methodology, scope, and evidence aligned to applicable PCI DSS 4.0 Req 11.x testing
- Control mapping to SOC 2, ISO 27001, HIPAA, and NIST CSF where requested
- Segmentation testing evidence when CDE boundary validation is in scope
Engagement Support
- Executive and technical readouts for leadership and delivery teams
- Interim notification of significant findings so remediation can start early
- One scoped post-remediation retest with an updated report or validation letter
Pick the depth of insider knowledge.
How we hold your data while we test it.
- ✓ISO/IEC 27001:2022-aligned information security programme; not externally certified
- ✓Signed rules of engagement and mutual NDA before engagement commencement
- ✓Encrypted evidence storage in transit and at rest; access limited to assigned team
- ✓Time-bound data retention with certified secure disposal on completion
- ✓Change window coordination; no production-impacting action without prior approval
- ✓Kill-switch procedure: named contact with authority to suspend testing immediately
What security and procurement teams ask first.
Does the reporting support PCI DSS?
The scope, methodology, evidence, and reporting can be aligned to applicable PCI DSS 4.0 Requirement 11.x testing, including segmentation validation. Final acceptance remains with your QSA or auditor.
How do you minimise production risk?
The signed rules of engagement define test windows, exclusions, escalation contacts, and approval gates. Potentially disruptive actions are coordinated in advance, and a named contact can suspend testing immediately.
What is included in the retest?
One scoped retest of remediated, in-scope findings is included under the SoW. Coverage, timing, and the resulting report update or validation letter are confirmed during scoping; expedited scheduling is subject to availability.
Can you test cloud environments?
Yes. Scope can include IAM privilege paths, control-plane configuration, exposed storage, containers, Kubernetes, and lateral movement. Provider notification requirements are handled before testing starts.