Available

Human-led penetration testing and audits

Tested by people. Every finding comes with a fix.

Penetration tests and security audits run by our practitioners under written scope: web applications, APIs, networks, and cloud. Every finding is validated by a person before it is reported, with reproduction steps, remediation guidance, and re-testing of fixes.

We assess against

• ✓ISO 27001
• ✓CIS Benchmarks
• ✓GDPR
• ✓NIS2
• ✓DORA
• ✓OWASP ASVS
• ✓NIST CSF 2.0
• ✓EU AI Act
• ✓EU Cyber Resilience Act
• ✓MITRE ATT&CK

Who it is for

Security leads and product owners preparing a release or answering an auditor.

What you get

• Web applications, APIs, cloud tenants, and networks you own
• Every finding validated by a person before it is reported
• Re-testing included to confirm each fix

How it stays safe

• Signed scope before any testing begins
• Ownership of each target verified first
• Only systems with verified ownership and signed scope are tested — never prospects or third parties

Questions

What do you need from us before testing starts?

Proof that you own or are authorised to test each target, plus a signed scope covering targets, windows, and rules of engagement. Nothing is tested without both.

Do you test systems we do not own?

No. We test only systems with verified ownership and signed scope — never prospects, customers, or third parties.