Our work

Real risks found and fixed. Clients who come back.

75+ engagements since 2013, and 9 in 10 come from returning clients and partners. Security work is confidential, so we don't name clients. Here are 16 representative profiles, and a sample of the report you'd get.

Request a scoping call See a sample report

Since 2013

Proven over 13 years.

13Years securing products

75+Engagements delivered

90%Of engagements from returning clients and partners

20+Years of combined team experience

Sample report

See exactly what you'll get.

A sample penetration test report (11 pages), built on a fictional fintech app so no client details are exposed. Same structure, depth and tone as the reports our clients receive.

Download sample report (PDF)

Executive summary in plain business terms
Every finding scored with CVSS v3.1
Reproduction steps, evidence and fixes
Retest status: what was fixed and verified
AI assistant findings mapped to the OWASP LLM Top 10

Selected project profiles

What we tested, and what changed.

P01 · B2B SaaS · Focused

Enterprise application assessment

Most findings confirmed fixed at retest.

Work

Application security testing and remediation retest

Found

1–5 findings, including critical and high risks

P02 · AI-enabled software · Focused

AI-enabled business platform

Every critical and high finding confirmed fixed at retest.

Work

Application, access-control, session and cloud-storage testing, with a remediation retest

Found

1–5 finding categories, including critical and high risks

P03 · Application software · Focused

Technical application assurance

Every reported issue confirmed closed at retest.

Work

Penetration testing and verification of fixes

Found

1–5 findings, including a critical issue

P04 · AI & analytics · Extended

AI and analytics platform

Full assessment delivered with prioritised fix guidance.

Work

Manual testing across user privilege levels, including AI-related controls

Found

6–10 medium-risk findings

P05 · Fintech / payments · Broad

Payments technology landscape

Engagement completed with prioritised remediation advice.

Work

Risk review, threat modelling, and application and API testing across app, API, cloud and data layers

Found

1–5 findings, including critical and high risks

P06 · Enterprise automation · Extended

Integrated automation platform

Critical and high risks uncovered and handed over with fix guidance.

Work

Web platform and local component testing, including business logic and token handling

Found

6–10 findings, including critical and high risks

P07 · Enterprise operations · Annual · Repeat client

AI-enabled operations platform

Tested every year, with every finding fixed at the final retest.

Work

Application testing and remediation retest, repeated annually

Found

6–10 findings, including critical and high risks

P08 · Business software · Focused

Operational business application

All findings fixed and closure confirmed.

Work

Application and API testing with remediation validation

Found

1–5 findings, including critical issues

P09 · AI workflow · Focused

AI-enabled workflow platform

High-risk issue identified, with clear fix guidance.

Work

Application and AI-related review across multiple instances

Found

1–5 findings, including a high-risk issue

P10 · Enterprise AI · Focused

AI assistant application

Critical and high risks found and reported with fix guidance.

Work

AI-related application security and session-control review

Found

1–5 findings, including critical and high risks

P11 · Digital services · Extended · Repeat client

Digital-services platform

Selected fixes verified through targeted retests, as an ongoing testing partner.

Work

Repeat testing across user workflows and cloud-backed file handling

Found

11–20 findings in a cycle, including a high-risk issue

P12 · Workforce software · Extended

Workforce application suite

Several fixes confirmed through targeted retests.

Work

Assessments across related applications and user roles, with targeted retests

Found

6–10 finding categories, including critical risks

P13 · Media technology · Focused

Digital media application

Every critical and high finding fixed.

Work

Application testing and remediation retest

Found

1–5 findings, including critical and high risks

P14 · Enterprise AI · Extended

Enterprise AI application suite

Most findings closed or fixed after a detailed retest.

Work

Authentication, authorisation and AI testing across user, admin and API surfaces

Found

11–20 confirmed findings after false-positive review

P15 · Industrial software · Focused

Industrial operations platform

High-risk issues identified and delivered with fix guidance.

Work

Application and API testing of authorisation, session controls and data exposure

Found

11–20 findings in a cycle, including high risks

P16 · Content publishing · Focused

Publishing and access-management platform

Report accepted and engagement completed.

Work

Application testing, access-model review and publishing-function coverage

Found

11–20 findings, mostly medium risk

About these profiles

How to read them.

Scale

Focused: one main application with its roles and interfaces. Extended: related apps, several privilege levels or integrated AI. Broad: several layers, from apps and APIs to cloud and data.

Counts

Profiles group related project work rather than counting client organisations. Finding counts are ranges of reported issues, excluding informational items and false positives.

Confidentiality

Outcomes describe each engagement at the time of reporting or retest. Names, domains, locations and dates are left out to protect our clients.

Get secured.

Tell us what you're shipping. You'll get a scoped, fixed quote within one business day.

Request a scoping call