Cybersecurity
Penetration testing and security code review for businesses that need a clearer view of their exposure, with evidence and practical advice to support the next decision.
Discuss an assessmentOur security services
Choose the approach that fits your concerns and the access available. We’ll agree the boundaries before the assessment.
An authorised assessment of the applications or systems agreed in scope, investigating security weaknesses and their potential impact.
Targets, testing depth, exclusions and operational constraints are defined for each engagement.
A focused review of agreed source code to investigate security weaknesses in implementation and give developers actionable recommendations.
Codebase, review depth, supporting context and source access requirements are agreed in advance.
What you receive
Clear reporting connects technical findings to the decisions you need to make. Deliverables are confirmed as part of the scope.
People behind the work
Our security work is backed by senior consultants with experience in penetration testing, security code review and kernel vulnerability research.
Credentials across our senior security consultants include OSCP, OSWE and OSEP.
Experience investigating vulnerabilities at the kernel level brings a deeper understanding of how software can fail, and how to approach its assessment.
The assessment process
We discuss your priorities and constraints before testing or accessing source code.
Agree the objectives, targets or codebase, exclusions, access, schedule and communication arrangements. Obtain explicit authorisation before testing.
Investigate within the agreed boundaries and document findings with supporting evidence and context.
Provide the agreed report and remediation recommendations. Discuss findings and define any follow-up or retesting separately.
A high-level outline of the systems or code involved, the reason for the assessment and your intended timeframe. We’ll then discuss access and a suitable way to share sensitive material.
No. Start with the business need, the systems or code involved and any concerns. We can discuss the assessment boundaries before proposing the work.
Yes. Penetration testing and security code review can be commissioned as standalone engagements.
Retesting is agreed separately, including what will be checked and when. We make that distinction clear when defining the engagement.
Please send only a high-level outline initially. We’ll agree the access requirements and a suitable way to share confidential information before the work starts.
Your next step
Tell us whether you need penetration testing or security code review, the broad scope and your intended timeframe.
Start with a brief outline. We’ll agree a suitable way to share sensitive information.