← services
[PENTEST]
Penetration Testing
We test the way a real attacker would, within a scope and rules of engagement agreed in writing. Every finding is verified by hand, rated for real-world impact and delivered with a concrete fix. After you remediate, we retest.
What is included
Web applications & APIs
Authentication, authorisation, business logic, injection and session handling, following the OWASP testing methodology.
External & internal networks
Internet-facing services, VPN and remote access, Active Directory and lateral movement from an assumed-breach position.
Cloud & Microsoft 365
Configuration review and attack paths in Azure / Entra ID, Microsoft 365 and AWS environments.
Vulnerability assessment
Authenticated and unauthenticated scanning for broader coverage between penetration tests.
What you receive
- ›Executive summary for management
- ›Technical report with evidence, CVSS rating and remediation steps
- ›Debrief call with your technical team
- ›Retest of fixed findings and an updated report
A good fit for
- ›Before a major release or after significant changes
- ›Annual testing required by ISO/IEC 27001, NIS2, DORA or customer contracts
- ›Organisations that want an independent view of their exposure
Discuss penetration testing with us
We will come back with a proposed scope, timeline and price.