Cybersecurity services

From security testing and engineering to continuous monitoring, governance, EU regulatory readiness and critical-infrastructure and OT security, delivered by experienced cybersecurity specialists.

1.01
Security Audits
Identify exploitable weaknesses and prioritise remediation.
Security testing
1.02
Red Team & Adversary Emulation
Test whether the organisation can prevent, detect and respond to a goal-driven attack.
Security testing
1.03
Social Engineering Assessment
Measure resilience to phishing, voice fraud and other social-engineering techniques.
Security testing
1.04
Purple Teaming
Validate and improve detection and response collaboratively.
Security testing
1.05
Attack Surface Management
Continuously identify and prioritise internet-facing exposure.
Security testing
1.06
DORA Threat-Led Penetration Testing
TIBER-EU-aligned TLPT for designated EU financial entities.
Security testing
1.07
Smart Contract & Web3 Security Audit
Identify code, logic and economic vulnerabilities before deployment.
Security testing
1.08
Ransomware Readiness Assessment
Test prevention, detection, recovery and decision-making for ransomware scenarios.
Resilience

Testing coverage

We assess the technical, human and physical attack surfaces available to an adversary. Each row links to the relevant service; testing depth ranges from a focused assessment to a full-scope red-team engagement.

Web applications & APIsOWASP WSTG, authentication & business logic
- Reconnaissance & ASM: Core capability
- Vulnerability assessment: Core capability
- Penetration test: Core capability
- Red team: Core capability
- Hardening review: Core capability
- Continuous monitoring: Available when included in scope
External attack surfaceDomains, subdomains, shadow IT
- Reconnaissance & ASM: Core capability
- Vulnerability assessment: Core capability
- Penetration test: Available when included in scope
- Red team: Available when included in scope
- Hardening review: Available when included in scope
- Continuous monitoring: Core capability
Cloud environments & containersAWS · Azure · GCP · Kubernetes
- Reconnaissance & ASM: Core capability
- Vulnerability assessment: Core capability
- Penetration test: Core capability
- Red team: Available when included in scope
- Hardening review: Core capability
- Continuous monitoring: Available when included in scope
Internal network & ADLateral movement and privilege-escalation paths
- Reconnaissance & ASM: Core capability
- Vulnerability assessment: Core capability
- Penetration test: Core capability
- Red team: Core capability
- Hardening review: Available when included in scope
- Continuous monitoring: Available when included in scope
Source code & software supply chainSAST, SCA, SBOM and build integrity
- Reconnaissance & ASM: Available when included in scope
- Vulnerability assessment: Core capability
- Penetration test: Available when included in scope
- Red team: Out of scope
- Hardening review: Core capability
- Continuous monitoring: Core capability
AI / LLM systemsPrompt injection, RAG and agents
- Reconnaissance & ASM: Available when included in scope
- Vulnerability assessment: Core capability
- Penetration test: Core capability
- Red team: Core capability
- Hardening review: Core capability
- Continuous monitoring: Available when included in scope
Mobile applicationsiOS, Android and API back ends
- Reconnaissance & ASM: Available when included in scope
- Vulnerability assessment: Core capability
- Penetration test: Core capability
- Red team: Available when included in scope
- Hardening review: Core capability
- Continuous monitoring: Out of scope
People (social engineering)Phishing, voice phishing and pretexting
- Reconnaissance & ASM: Core capability
- Vulnerability assessment: Out of scope
- Penetration test: Core capability
- Red team: Core capability
- Hardening review: Available when included in scope
- Continuous monitoring: Available when included in scope
Wireless networks & physical securityWi-Fi, access cards and on-site access
- Reconnaissance & ASM: Core capability
- Vulnerability assessment: Available when included in scope
- Penetration test: Core capability
- Red team: Core capability
- Hardening review: Available when included in scope
- Continuous monitoring: Out of scope
OT, ICS & embedded systemsPurdue levels 0–3.5, IEC 62443 zones and conduits, controllers, firmware, industrial protocols
- Reconnaissance & ASM: Core capability
- Vulnerability assessment: Core capability
- Penetration test: Core capability
- Red team: Core capability
- Hardening review: Core capability
- Continuous monitoring: Available when included in scope
Vessels & portsBridge, engine and cargo networks, terminal and crane systems, ship–shore interface
- Reconnaissance & ASM: Core capability
- Vulnerability assessment: Core capability
- Penetration test: Core capability
- Red team: Available when included in scope
- Hardening review: Core capability
- Continuous monitoring: Available when included in scope
Airports & air navigationBaggage, access control, check-in platforms, navaid networks, GNSS and ADS-B dependencies
- Reconnaissance & ASM: Core capability
- Vulnerability assessment: Core capability
- Penetration test: Core capability
- Red team: Available when included in scope
- Hardening review: Core capability
- Continuous monitoring: Available when included in scope

Testing coverage
Surface by test	RECReconnaissance & ASM	VAVulnerability assessment	PTPenetration test	RTRed team	HRHardening review	MONContinuous monitoring
Web applications & APIsOWASP WSTG, authentication & business logic	Reconnaissance & ASM: Core capability	Vulnerability assessment: Core capability	Penetration test: Core capability	Red team: Core capability	Hardening review: Core capability	Continuous monitoring: Available when included in scope
External attack surfaceDomains, subdomains, shadow IT	Reconnaissance & ASM: Core capability	Vulnerability assessment: Core capability	Penetration test: Available when included in scope	Red team: Available when included in scope	Hardening review: Available when included in scope	Continuous monitoring: Core capability
Cloud environments & containersAWS · Azure · GCP · Kubernetes	Reconnaissance & ASM: Core capability	Vulnerability assessment: Core capability	Penetration test: Core capability	Red team: Available when included in scope	Hardening review: Core capability	Continuous monitoring: Available when included in scope
Internal network & ADLateral movement and privilege-escalation paths	Reconnaissance & ASM: Core capability	Vulnerability assessment: Core capability	Penetration test: Core capability	Red team: Core capability	Hardening review: Available when included in scope	Continuous monitoring: Available when included in scope
Source code & software supply chainSAST, SCA, SBOM and build integrity	Reconnaissance & ASM: Available when included in scope	Vulnerability assessment: Core capability	Penetration test: Available when included in scope	Red team: Out of scope	Hardening review: Core capability	Continuous monitoring: Core capability
AI / LLM systemsPrompt injection, RAG and agents	Reconnaissance & ASM: Available when included in scope	Vulnerability assessment: Core capability	Penetration test: Core capability	Red team: Core capability	Hardening review: Core capability	Continuous monitoring: Available when included in scope
Mobile applicationsiOS, Android and API back ends	Reconnaissance & ASM: Available when included in scope	Vulnerability assessment: Core capability	Penetration test: Core capability	Red team: Available when included in scope	Hardening review: Core capability	Continuous monitoring: Out of scope
People (social engineering)Phishing, voice phishing and pretexting	Reconnaissance & ASM: Core capability	Vulnerability assessment: Out of scope	Penetration test: Core capability	Red team: Core capability	Hardening review: Available when included in scope	Continuous monitoring: Available when included in scope
Wireless networks & physical securityWi-Fi, access cards and on-site access	Reconnaissance & ASM: Core capability	Vulnerability assessment: Available when included in scope	Penetration test: Core capability	Red team: Core capability	Hardening review: Available when included in scope	Continuous monitoring: Out of scope
OT, ICS & embedded systemsPurdue levels 0–3.5, IEC 62443 zones and conduits, controllers, firmware, industrial protocols	Reconnaissance & ASM: Core capability	Vulnerability assessment: Core capability	Penetration test: Core capability	Red team: Core capability	Hardening review: Core capability	Continuous monitoring: Available when included in scope
Vessels & portsBridge, engine and cargo networks, terminal and crane systems, ship–shore interface	Reconnaissance & ASM: Core capability	Vulnerability assessment: Core capability	Penetration test: Core capability	Red team: Available when included in scope	Hardening review: Core capability	Continuous monitoring: Available when included in scope
Airports & air navigationBaggage, access control, check-in platforms, navaid networks, GNSS and ADS-B dependencies	Reconnaissance & ASM: Core capability	Vulnerability assessment: Core capability	Penetration test: Core capability	Red team: Available when included in scope	Hardening review: Core capability	Continuous monitoring: Available when included in scope

Core capability
Available when included in scope
Out of scope

The matrix is indicative. Exact depth, methodology and rules of engagement are agreed during scoping.

Helpful tools

How we would test your environment

From security testing and engineering to continuous monitoring, governance, EU regulatory readiness and critical-infrastructure and OT security, delivered by experienced cybersecurity specialists.

Book a consultation Scope a test

Direct access to a senior specialist · Reply within 24 hours · NDA available on request

Cybersecurity services

Security Audits

Red Team & Adversary Emulation

Social Engineering Assessment

Purple Teaming

Attack Surface Management

DORA Threat-Led Penetration Testing

Smart Contract & Web3 Security Audit

Ransomware Readiness Assessment

AI & LLM Security

API Security Testing

Secure Code Review & SAST

DevSecOps & Secure CI/CD

Mobile App Security Testing

Supply Chain Security & SBOM

Threat Modelling & Secure Design

Performance & Load Testing

Cloud Security & Posture Assessment

Kubernetes & Container Security

Proactive Security Monitoring

Incident Response & Digital Forensics

OSINT & Open Data Analysis

CISO-as-a-Service

NIS2 & ISO 27001 Readiness

DORA Compliance & Resilience Testing

Data Protection Impact Assessment

Security Policy & Procedure Development

Security Technology Selection & Implementation

Employee Cybersecurity Awareness Training

OT & ICS Security Assessment

OT Penetration Testing & Red Team

Industrial Product & Embedded Security

Maritime & Port Cybersecurity

Aviation & Airspace Cybersecurity

Testing coverage

Helpful tools

See what the report includes

Create a scoped brief in one minute

How we would test your environment