We’ll assess your current security practices, code stability and patterns as well as penetration test from a white, grey or black box perspective. Our static code assessments focus on Python, Ruby, PHP, C, C++ and Go, while our penetration tests and assessments are platform and system agnostic.

Assessments include everything from orchestration and deployment, to maintenance, release and roll-back. As part of the penetration tests, we can offer a full attack scenario, including but not limited to, targeted ethical phishing and social engineering engagement.

We begin under written instruction, where you set the parameters, and level of paranoia, to test. You decide whether we test against a virtual replication of your system or the live environment. No compromise against your systems, security setup or environment will be actioned unless you request it. We show by Proof of Concept the exploit or security weakness on your AWS, Azure, Google Cloud, AliCloud, OVH, Rackspace or self-hosted environments, and illustrate the potential ways of abusing the systems using the weakness as part of an attack chain.