Penetration testing services
Offensive security only. Commission one test, combine a few, or keep a programme running through the UK audit year.
Four practices, one testing team
Application testing covers the software you build. Infrastructure and cloud covers where it runs and how people sign in. Adversary simulation tests whether your people and controls notice an attack. Testing programmes wrap these into a schedule that suits audits and release cycles.
- Each service has its own scope, method and sample deliverables
- Combine services in one proposal and one report
- Not sure which fits? The table below maps goals to tests
Typical starting points
Manual-first testing of web, API, mobile, desktop and AI-powered applications
Web Application Pentest
Manual testing for web apps and portals.
- Authentication
- Access control
- Injection & input
API Pentest
Testing for REST, GraphQL and gRPC APIs.
- Object authorisation
- Function authorisation
- Data exposure
Mobile App Pentest
iOS and Android app security testing.
- Data at rest
- Transport
- Platform misuse
Thick Client Pentest
Desktop and two-tier client testing.
- Local storage
- Binary analysis
- Privilege escalation
Secure Code Review
Manual source review for security flaws.
- Input handling
- Injection sinks
- Authentication
AI & LLM Pentest
Testing for LLM and GenAI features.
- Prompt injection
- Data leakage
- Excessive agency
Perimeter, internal networks, Active Directory, cloud, containers, wireless and devices
External Network Pentest
Internet-facing perimeter testing.
- Asset discovery
- Service analysis
- Remote access
Internal Network Pentest
Post-breach testing from inside.
- Foothold & recon
- Credential access
- Lateral movement
Active Directory Pentest
Domain and identity attack-path testing.
- Enumeration
- Kerberos abuse
- ACL & object rights
Cloud Pentest (AWS, Azure, GCP)
Config and identity review for AWS, Azure, GCP.
- Identity & access
- Storage & data
- Network exposure
Container & Kubernetes Pentest
Cluster, image and workload testing.
- RBAC & service accounts
- Pod security
- Container escape
Wireless Pentest
Wi-Fi and wireless network testing.
- Encryption & keys
- Enterprise authentication
- Rogue & evil twin
IoT & Device Pentest
Hardware, firmware and device testing.
- Hardware interfaces
- Firmware
- Wireless & protocols
Objective-led attacks that measure how well you detect and respond, not just prevent
Red Team Assessment
Objective-led, multi-vector attack simulation.
- Objectives
- Reconnaissance
- Initial access
Social Engineering Assessment
Phishing and human-focused testing.
- Email phishing
- Voice pretext
- Physical access
Purple Team Exercise
Collaborative attack and detection tuning.
- Technique selection
- Execution
- Detection measurement
VAPT, year-round continuous testing, audit-driven pentests and remediation validation
VAPT (Vulnerability Assessment & Penetration Testing)
Combined assessment and manual pentest.
- Surface mapping
- Vulnerability assessment
- Manual verification
Continuous Pentesting (PTaaS)
Year-round testing as a service.
- Defined scope
- Testing cadence
- Change-triggered tests
Compliance Pentesting
Audit-driven testing with evidence.
- Framework mapping
- PCI DSS testing
- ISO 27001 alignment
Retest & Remediation Validation
Proving your fixes actually worked.
- Finding intake
- Reproduction
- Status assessment
Match the test to the question you need answered
Start with the outcome you want. The right service usually follows from it.
| Your goal | Best fit | Often paired with | What you receive |
|---|---|---|---|
| Ship a new web product safely | Web Application Pentest | API Pentest | Rated findings per role, fix guidance, retest |
| Prove a mobile app protects stored data | Mobile App Pentest | API Pentest | MASVS-mapped results for iOS and Android |
| Find flaws before code reaches production | Secure Code Review | Web Application Pentest | File and line references with safer patterns |
| Check an AI assistant or agent cannot be misused | AI & LLM Pentest | API Pentest | Prompt injection, data leakage and tool-abuse results |
| See what the internet can reach | External Network Pentest | Cloud Pentest | Exposed services, weak entry points, attack paths |
| Limit the damage of a compromised laptop | Internal Network Pentest | Active Directory Pentest | Lateral movement and privilege paths, ranked |
| Harden AWS, Azure or GCP | Cloud Pentest | Container & Kubernetes Pentest | Identity, network and data exposure findings |
| Test whether staff and the SOC would catch an attack | Red Team Assessment | Social Engineering Assessment | Objective narrative, ATT&CK timeline, detection gaps |
| Improve detections with your defenders in the room | Purple Team Exercise | Red Team Assessment | Technique-by-technique detection scorecard |
| Satisfy an auditor or regulator | Compliance Pentesting | VAPT | Report aligned to the control, plus attestation letter |
| Test every release, not once a year | Continuous Pentesting (PTaaS) | Retest & Remediation Validation | Rolling findings and a live remediation view |
| Confirm another provider's findings are fixed | Retest & Remediation Validation | VAPT | Pass or fail per finding, updated letter |
Still unsure? Our guide to black, grey and white box testing covers how much access to give testers, and pentest vs bug bounty explains when each one earns its cost.
Ready to find your risks before attackers do?
Tell us what you need tested or monitored. A senior consultant replies within one business day with a scoped, fixed-price proposal.
- Fixed-price proposal
- Reply within 1 business day
- NDA on request