Penetration testing, incident response and certification for mid-sized UK businesses. We break things carefully, write it down plainly, and help you fix it.
Our services Book a scoping call
// what we do
We do not sell software, and we do not resell anybody else's. Everything below is delivered by the same people who will be on the call when something goes wrong.
External, internal, web application and cloud. Manual testing by CREST-registered testers, not a scan with a logo on it.
Containment, forensics and recovery, with a four-hour SLA for retained clients. We have handled ransomware on a Sunday more than once.
Certification for both levels, including the remediation work to actually pass rather than a checklist emailed over.
Architecture, cloud configuration and supplier assurance, aimed at the risks specific to how your business actually operates.
// the report
Every report opens with two pages a non-technical director can act on: what we found, what it would cost an attacker, and what to fix first. The technical detail follows behind it, with reproduction steps for every finding.
We rate by exploitability in your environment, not by raw CVSS. A critical that needs domain admin to reach is not the thing keeping you up at night, and we will say so.
// engagement
A call to agree targets, rules of engagement and out-of-hours windows. Fixed price from this point.
Active testing with a daily status note, and an immediate call if we find anything critical mid-engagement.
Written report, then a live walkthrough with your team where they can argue with our ratings.
Free retest of every finding you have remediated, and an updated certificate for your clients.
// retainers
Retained clients get a named responder, a four-hour SLA, and an annual test built into the fee. More usefully, they get somebody who already knows their network before the call at 2am.
Retainers start at £1,800 a month and include out-of-hours cover, quarterly reviews and unlimited advisory calls.
// next step
Thirty minutes, no charge, and an honest answer about whether you need a test yet or whether your money is better spent elsewhere first.
Our services