New
External Vulnerability Scan — find out what attackers see before they do. Fixed price, quoted in writing first.
Claim yours
Your clients are being asked for a penetration test by their insurer, their auditor or their largest customer. Standing up an offensive security practice to answer that is expensive and slow. We work as your subcontracted testing team — fixed scope, fixed price, your logo on the report, and no approach to your client before, during or after the engagement.
Cyber policies increasingly require evidence of testing at renewal. That request lands on your desk, not the client’s.
A framework assessment carries more weight when the tester is not the same party that built and manages the environment.
A capable tester is a hard hire and an expensive one to keep busy. Utilisation is the problem, not capability.
Sending the work to a firm that also sells managed services puts your account in front of a competitor.
What an attacker reaches from the internet: exposed services, misconfiguration, weak authentication and forgotten hosts.
What happens after one workstation falls: lateral movement, privilege escalation and the path to domain control.
OWASP Top 10 coverage plus the business logic flaws automated scanners never find.
Phishing and pretext testing against the client’s staff, reported by department rather than by individual.
Segregation between guest and corporate networks, authentication weaknesses and rogue access points.
Microsoft 365 and cloud tenancy configuration, conditional access, and the identity paths that bypass the firewall entirely.
Mutual NDA and written non-solicitation terms before we see anything about your client.
Just you and us. We agree the target, the depth, the rules of engagement and the reporting format.
One number, in writing, before any testing begins. Your margin is yours to set on top of it.
Manual, hands-on testing with a direct line to you. Anything critical is escalated immediately, not held for the report.
Your-branded report with an executive summary and technical detail, then a retest of the findings you remediate.
It is in the agreement, in writing, before we scope anything. A partnership that costs you an account is worth nothing to either of us.
You will deal with the person doing the testing. That is an advantage on responsiveness and a limit on how many concurrent engagements we take.
If the client has no MFA and no backups, a penetration test will produce a long report and no improvement. We will say so.
Fixed scope and a fixed number in writing, so you can quote your client with confidence and protect your margin.
An insurance questionnaire, an audit requirement or a customer security review. Send us the ask and we will tell you the scope and the number.