Offensive security for real-world risk
We run penetration tests with a rigorous methodology and deliver clear, prioritised, ready-to-act reports for both technical teams and management.
Services
Every project is adapted to your scope, your sector and the level of risk you want to assess.
Testing of web applications, REST/GraphQL APIs and business logic.
Frameworks: OWASP Top 10 · ASVS · API Security Top 10
Assessment of your Internet-facing perimeter and internal network.
Frameworks: PTES · NIST SP 800-115 · MITRE ATT&CK
Static and dynamic analysis of Android and iOS apps and their backends.
Frameworks: OWASP MASVS · MASTG
Configuration review and penetration testing on AWS, Azure and Google Cloud.
Frameworks: CIS Benchmarks · Cloud provider guidance
Simulated campaigns to measure and improve your people’s resilience.
Frameworks: Authorised, ethical campaigns
Simulation of a real adversary against your people, processes and technology.
Frameworks: MITRE ATT&CK
Methodology
We follow recognised frameworks (PTES, OWASP and NIST SP 800-115) and adapt them to every project.
Phase 01
We define targets, objectives, testing windows, emergency contacts and rules of engagement. Nothing starts without written authorisation.
Phase 02
We map the attack surface using passive and active techniques and model the threats most relevant to your context.
Phase 03
We identify vulnerabilities and exploit them in a controlled way to confirm real impact, with no false positives.
Phase 04
We assess how far an attacker could get: reachable data, privileges obtained and lateral movement.
Phase 05
We deliver an executive summary, technical detail, risk rating (CVSS) and prioritised recommendations.
Phase 06
We walk your team through the results and validate the fixes in a retest.
About us
We are a Portuguese team of offensive security specialists.
We work with organisations that need to know, with evidence, whether their systems can withstand a real attack. Every project is led by specialists who combine technical rigour with clear communication.
We believe security is built on transparency: we explain what we do, why, and what you can do next.
We do not resell security products. Our advice is always independent and based on the evidence we find.
An executive summary for management, technical detail with proof of concept and remediation steps for your teams.
Rules of engagement agreed in writing and techniques chosen to avoid disrupting your services.
NDA, encrypted communication and secure deletion of data at the end of the project.
Compliance
Our reports can serve as evidence in audits and compliance programmes. The applicable framework depends on your sector and size.
A vulnerability scan identifies known weaknesses, usually with automated tools. A penetration test goes further: a specialist tries to exploit those weaknesses, chain them together and demonstrate the real business impact, removing false positives.
We plan to minimise risk. Together we define the rules of engagement, time windows and permitted techniques, and we avoid destructive testing. We can also test in pre-production environments.
Yes. We only test systems with written authorisation from their owner. Scope, dates and emergency contacts are recorded before we start.
A report with an executive summary, a technical description of each vulnerability, risk rating, proof of concept and remediation recommendations. We present the results in a meeting and can validate fixes in a retest.
It depends on the scope. The effort and schedule estimate is always included in the quote.
Yes. We adapt the scope and documentation to your sector’s requirements and provide evidence that can be used in audits.
Contact
Describe what you want to test. We will reply with a no-obligation quote.
