Penetration testing that shows what’s at risk, and what to fix first.

Who you work with

You talk to the person testing your system.

Scoping calls, the engagement, the walkthrough and the retest are all the same people. That is the main advantage of a 3-person team: no account manager relaying questions to a contractor you never meet.

10,000+ hours of offensive security work across the team.

What we answer

Four questions, with evidence.

• Can someone take over an account?

  Password reset, session handling, MFA enrolment and the tokens behind them.

• Can one customer reach another's data?

  Tenant and object-level authorization, tested at the API rather than only in the interface.

• Can a normal user become an admin?

  Role boundaries, privileged functions and the business logic between them.

• Can someone on the internet reach the inside?

  Your perimeter, your cloud configuration, and the path from one leaked key to the rest.

Services

What we test.

• 

  Web Application Testing

  Manual testing of your application's authenticated and unauthenticated attack surface, aligned to OWASP ASVS.

• 

  Mobile Application Testing

  iOS and Android testing that treats the app as untrusted, because in an attacker's hands it is.

• 

  External Network Testing

  What an attacker on the internet can see, reach and exploit, validated against the assets you authorise.

• 

  Internal Network Testing

  We assume the perimeter already failed, then find out how far that gets someone inside your network.

• 

  API Testing

  Your API is the real application. We test it directly, with every client-side restriction removed from the path.

• 

  Cloud Security Testing

  Azure and AWS environments tested the way an attacker holding one leaked key would use them, not the way the diagram says they work.

Common questions

The four we get asked first.

What does a penetration test cost?

Engagements start at $5,000 CAD. That figure covers a focused assessment of a single application or a small external perimeter. Larger scopes cost more, and you get a fixed price in writing before any work begins.

What is included in the price?

Testing, the full written report, a walkthrough call to go through the findings with your developers, and one retest round of the reported findings on eligible services, requested within 60 days of the report. Internal network and Active Directory retests are scoped separately when required.

What is the retest?

Once you have remediated, we test the reported findings again and issue a retest summary confirming what is closed and what is still open. One retest round of the original findings is included for eligible services. Request it within 60 calendar days of report delivery, and we run it within 10 business days of your request, with working access in place. Internal network and Active Directory retests are not included as standard. When required, they are scoped separately, with timing and any fees agreed in advance. In combined engagements, the included round covers findings from eligible services. It is the only way to know a fix actually worked rather than appeared to.

How do we get started?

Request a scoping call. We will ask what you have built, what worries you, and what your constraints are, then propose a scope and a fixed price. Scoping calls are free and we do not require you to have answers ready.

All questions