Cybersecurity for organizations that build and run critical systems.
Offensive security, engineering, and consulting services.
Services
What we do
Three focused practices for organizations that build and run critical systems.
01 Testing
Offensive Security
Manual, objective-driven testing from the attacker's position: penetration tests, red team engagements, and product-level vulnerability research.
02 Hardening
Security Engineering
Security built into your cloud, infrastructure, and development pipeline: reviewed, hardened, and maintained.
03 Advisory
Consulting
Long-term security strategy, framework alignment, and incident response readiness built from attacker behavior.
Research
Published work
Advisories, vulnerability research, and technical write-ups from our independent research.
Red Team OPSEC: High-Stealth Tradecraft and Controls
A kill-chain-ordered taxonomy of 127 malware techniques rated by detection resistance, mapped to the defensive controls that degrade each OPSEC tier, and an argument that the lowest-OPSEC technique achieving the objective is usually the correct one in a red team engagement.
From a network foothold to the data center through one backup server
An internal engagement that began with an ordinary user account and ended with administrative control of the virtualization platform and an offline copy of the domain, through a Veeam Backup and Replication server that was two years behind on a critical patch.
External attack paths into Tier 0 infrastructure
The same few ordinary gaps compose into a route from an internet-facing service to Tier 0: the identity, virtualization and backup systems that decide whether an incident is recoverable.
Contact
Tell us what you need
Describe the systems and what you need looked at. We come back with a scope and a window before you commit to anything.
- [email protected]