Services

Penetration testing

We attack your systems the way a real adversary would — with your permission — and show you exactly what we found and how to fix it.

A penetration test answers a simple question: if someone tried to break in, how far would they get? We test your systems by hand, the way an attacker would, rather than just running a scanner and forwarding the output.

What we can test

• Websites and web applications, including login, payment and admin areas.
• External infrastructure — everything your organisation exposes to the internet.
• Internal networks — what an attacker could reach once inside, for example from a compromised laptop.
• Cloud and email configuration, such as Microsoft 365 and Google Workspace.

TODO(Artur): confirm this scope list, and whether to offer mobile apps, Wi-Fi or social engineering (phishing) tests.

How it works

1. Scoping. We agree in writing what is in scope, what is off limits, when we test, and who to call if something goes wrong.
2. Testing. We look for weaknesses and try to exploit them safely, without damaging data or disrupting your work.
3. Reporting. You get a report with an executive summary for management and step-by-step technical findings for whoever fixes them, ranked by risk.
4. Retest. Once you have fixed the issues, we check that the fixes work.

TODO(Artur): is the retest included by default, or optional?

What you get

• A clear picture of your real exposure, not a list of theoretical risks.
• Evidence for each finding, so your team can reproduce and fix it.
• Practical fixes that fit your budget and your team.