Services

Six penetration tests, each scoped to the risk you actually have

Every test is manual-first, carried out by a senior tester, and comes with a fixed quote, a debrief call and a free retest within 90 days.

01 · INFRASTRUCTURE

External penetration testing

See your internet-facing systems the way an attacker does, before one finds the gap.

Best forAnnual testing, ISO 27001 and Cyber Essentials Plus preparation, customer questionnaires
Covers: exposed services, VPN and remote access, admin panels, email and DNS securityExplore external testing →
04 · APPLICATIONS

API penetration testing

REST and GraphQL endpoints tested for broken authorisation, data exposure and abuse.

Best forMobile and single-page app back-ends, partner integrations, fintech
Covers: REST and GraphQL, object-level authorisation, data exposure, rate limitsExplore api testing →
06 · PEOPLE

Social engineering testing

Phishing and phone-pretext simulations that measure human risk without blaming staff.

Best forAwareness programmes, ISO 27001 controls, insurer requirements
Covers: phishing simulations, phone pretexting, click and credential metrics, recommendationsExplore social engineering testing →

Common combinations

Testing related areas together finds more and costs less than separate engagements.

Launch ReadyWEB + API (+ MOBILE)

For product launches and customer due diligence. One scope, one report, every layer of your product.

Annual AssuranceEXTERNAL + INTERNAL

For ISO 27001, Cyber Essentials Plus preparation and insurance. Your perimeter and what lies behind it.

People & PerimeterEXTERNAL + SOCIAL ENGINEERING

For the two routes most real attacks start with: exposed systems and a convincing email.

Not sure which test you need?

Tell us why you need a test and we'll recommend the smallest scope that meets it, with no upselling.

Ask for a recommendation