Services
À la carte streams,
one method.
Each stream is scoped and priced independently. Combine them and you get a single planning phase, a single point of contact and one consolidated report.
Offensive Security
We think and act like a real attacker to show what is exploitable, how far an intrusion could go and what to fix first.
Infrastructure, identity and applications
-
Stream 01
External Penetration Test
Acting as an unauthenticated Internet attacker: reconnaissance of domains, IPs and exposed services, then manual exploitation of web apps, APIs, VPN and remote access to prove what can be reached from outside.
-
Stream 02
Internal Penetration Test
From a standard-user foothold on your network, we map systems and segments, escalate privileges and move laterally toward critical servers, business applications and sensitive data, with your EDR left active.
-
Stream 03
Active Directory & Identity Security
Review of accounts, roles, delegations, ADCS, GPOs, MFA and Conditional Access, then testing from low-privilege, business-role and privileged accounts to map identity attack paths up to Domain Admin or Global Admin.
-
Stream 04
Cloud Security Assessment
Configuration review (RBAC, policies, logging, secrets) combined with assumed-breach testing from a cloud identity: escalation through roles, managed identities and tokens, and pivots back to on-premises.
-
Stream 05
Web, API & Mobile Application Testing
Authenticated testing of critical applications against the OWASP Top 10 and API Top 10: access control (IDOR / BOLA), authentication and sessions, business-logic abuse and data exposure between integrated apps.
-
Stream 06
Vulnerability Assessment
Automated scanning of internal and external assets with manual validation to remove false positives, risk-based prioritization and a remediation plan. Can run quarterly to track your exposure over time.
Adversary simulation and human factor
Beyond technical flaws, these streams test your detection and response capability, your people and your devices under realistic attack scenarios.
-
Stream 07
Red Team / Adversary Simulation
A covert, objective-driven campaign combining digital, human and physical vectors to reach your crown jewels, testing at once your controls, your people's vigilance and your SOC's detection and escalation.
-
Stream 08
Purple Teaming & Breach-and-Attack Simulation
Replay of real attacker techniques (MITRE ATT&CK) side by side with your SOC or MDR provider to measure what is prevented, detected and alerted, then tune detection rules and close visibility gaps.
-
Stream 09
Social Engineering
Controlled, pre-approved phishing, smishing, vishing and AI deepfake executive-impersonation scenarios to assess awareness, verification of high-trust requests and reporting behaviour.
-
Stream 10
Lost / Stolen Laptop
We simulate the loss of a corporate laptop: is it isolated in time? Can disk encryption be bypassed? Which credentials, tokens and data are reachable from a locked, then an unlocked device?
-
Stream 11
Segmentation Testing
Validation, in both directions, that boundaries between environments (subsidiaries, OT / IT, PCI, guest networks, cloud) really stop an attacker, including trust relationships and shared identities.
Deliverables
- Findings register and evidence package at the end of each stream, for early remediation
- Executive summary and technical report
- Attack-path analysis and prioritized remediation roadmap
- Retest of Critical and High findings, with attestation letter
- Debrief and remediation workshop with your teams
Incident Response
From preparation to recovery, our responders help you contain an attack, understand what happened and return to normal operations safely.
-
Prepare
IR Plan, Playbooks & Exercises
IR plan and ransomware / business email compromise (BEC) playbooks aligned with NIST SP 800-61, tested through crisis simulation exercises.
- Incident response plan: roles, escalation and decision criteria
- Ransomware, BEC and data-leak playbooks
- Crisis communication templates
- Tabletop and crisis simulation exercises
DeliverableIR plan, playbooks, exercise report
-
Respond
Incident Response & Containment
Remote or on-site responders: triage and scoping, containment (isolation, account and token revocation), eradication of the threat, coordination with your IT teams, MSP and insurer.
- Rapid triage and scoping
- Remote-first response
- On-site deployment
- Ransomware and email compromise (BEC) expertise
DeliverableContainment plan and daily status updates
-
Investigate
Forensic Investigation (DFIR)
Evidence preserved with chain of custody; analysis of endpoints, servers, cloud and M365 logs to establish the timeline, root cause and data affected.
Compromise Assessment
Proactive threat hunting for signs of an undetected or past intrusion (persistence, C2, credential theft) across your estate.
DeliverablesForensic report: timeline, root cause, impacted data. Compromise assessment report.
-
Recover
Restoration Support
Help to rebuild safely and quickly: restoration from clean backups, integrity checks and hardening before systems return to production.
- Clean, prioritized restoration of critical systems
- Identity rebuild and credential resets
- Post-incident heightened monitoring
DeliverableRecovery plan and hardening recommendations
-
Monitor
Dark Web Monitoring
Continuous watch of criminal forums, marketplaces, leak and paste sites for your domains, people and data, with alerts and takedown guidance.
- Leaked credentials and session cookies
- Ransomware leak sites
- Executive and brand exposure
DeliverableReal-time alerts and monthly report. Monthly or annual subscription.
How a response engagement works
Each engagement is covered by an engagement letter. Response work is billed on time spent, with an effort estimate provided at scoping.
Report an incident- 1
Contact our response team
We qualify the incident and its urgency with you.
- 2
Scope and engagement letter
Team, approach and estimated effort agreed upfront.
- 3
Respond, investigate, recover
Remote-first, on-site if needed.
Readiness and crisis simulation exercises
Testing your response in a simulated environment reveals gaps in roles, decisions and communications before a real attack does. Three formats, of increasing realism.
-
Level 1
Walkthrough
Players walk through their response to a semi-complex incident, with targeted facilitator guidance. Ideal for a first exercise or a new IR plan.
About 6 weeks
-
Level 2
Tabletop
Players react to a scenario that unfolds through injects (ransomware, data leak, BEC), with guidance from the facilitator on decisions and escalation.
6 to 8 weeks
-
Level 3
Wargame
Executive and technical teams respond together, in “real time”, to a complex, evolving incident, including crisis communications and business continuity decisions.
6 to 10 weeks
Exercise deliverables
- Post-exercise report with findings and improvement plan
- Findings workshop with the sponsor and key stakeholders
- Leadership checklist: roles and challenging questions
Physical Security
Physical security is how you deny, detect and respond to threats against facilities, staff, data and restricted areas. We assess it, test it in the field and help you build the target program.
- Assess
- Test
- Design
- Implement
-
Stream 01
Physical Security Maturity Assessment
Review of governance, policies, access control, video surveillance, intrusion detection, visitor management and incident handling against recognized practices (ASIS, CPTED).
-
Stream 02
Site Risk & Vulnerability Assessment
On-site inspection of a facility (offices, data centre, warehouse, retail): threats, perimeter, entry points, locks and badges, critical rooms, with a risk-rated vulnerability register.
-
Stream 03
Physical Intrusion Testing
Authorized attempts to get in as a motivated intruder: tailgating, pretexting, badge cloning, lock bypass, access to network rooms and ports, rogue-device drop. And whether staff detect and escalate.
-
Stream 04
Program Design
Target physical security program: governance and roles, policies and standards, technology roadmap (access control, CCTV, alarms) and integration with cyber incident response.
-
Stream 05
Implementation Support
Hands-on help to deploy the roadmap: policy rollout, vendor and technology selection, project oversight and staff awareness.
Safe, authorized testing. Every on-site activity is approved in writing beforehand. Testers carry a signed authorization letter and an emergency contact, and stop immediately on request. Physical security can also be combined with a red team or social engineering campaign.
Deliverables
- Current-state risk and vulnerability assessment report
- Intrusion test evidence and physical attack-path report
- Target physical security program
- Prioritized remediation program
Pricing
Fees are set
after a short scoping call.
Tell us which streams you are interested in and a little about your context. You will receive a proposal with scope, timeline and a fee estimate.
Request a quote