Senior offensive security. Audit-grade.
10+ years of offensive testing, with the certifications and audit pedigree EU regulators expect — NIS2, DORA and ISO 27001.
10+ years offensive security
PASSI-qualified audit pedigree
Reporting in EN, NL & FR
OSCP · OSWE · OSWP · CRTO
Trusted by CTOs across the Netherlands and the EU
Offensive security, on demand.
Hire senior security experts by the hour, day or project, no long-term commitments, just results.
Expose what's exploitable
Simulated real-world attacks surface the weaknesses that matter, before an attacker does.
Strengthen the defence
Senior manual testing, not just AI scanners, hardens the controls automated tools miss.
Prove the gain
Prioritised, board-ready reporting turns findings into security you can measure and show a supervisor.
Four offensive-security certifications.
The exact stack EU buyers ask for when scoping senior pentest or red-team work.
The full catalogue — offensive to incident response.
Every service runs standalone or bundled into a NIS2 programme. Fixed price, fixed scope, audit-ready output.
01
External pentest
Internet-facing perimeter — exposed services, leaked secrets, weak edges. OWASP, OSSTMM and PTES methodology.
02
Internal pentest + Active Directory
Assumed-breach scenario. Privilege escalation, lateral movement, Kerberos abuse, BloodHound, ACL chains, GPO hardening.
03
Cloud — AWS + Microsoft Entra ID
IAM, S3, networking, KMS, conditional access, PIM, MFA bypass, hybrid identity and M365 hardening. CIS benchmark plus exploitation.
04
Web / Mobile application + API pentest
OWASP Top 10 + API Top 10 — manual and AI-augmented. Authn/Authz, business logic, IDORs, race conditions, deserialization.
05
Code review · SAST · SCA
Manual secure-code review, SAST, dependency analysis (SCA) and secret scanning. For SDLC compliance under NIS2 Article 21(2)(e).
06
Red team operation + phishing
Multi-week and objective-based, initial access to data exfiltration, the full chain. Phishing pretexts, click-through and credential-harvest analysis.
07
Physical intrusion — “Mystery Guest”
Social engineering and on-site testing, tailgating, badge cloning, insider-threat scenarios. Surfaces the physical risks scans never see.
08
vCISO & incident response
CISO-as-a-Service for strategy and audit readiness, plus SOC and incident-response support when something goes wrong.
Testing that feeds straight into your audit trail.
Every engagement delivers executive and technical reporting in EN, NL or FR, written to be shown to a supervisor.
NIS2
Article 21 testing evidence — perimeter, internal, application and SDLC controls, documented for supervisory review.
DORA
Threat-led penetration testing and ICT-risk evidence for financial-sector resilience requirements.
ISO 27001
Technical testing that maps to Annex A controls and feeds straight into your ISMS audit trail.
Tell us what you need tested. You'll hear back within 24 hours.
No pitch, an honest read on scope, methodology and the right way of working for your environment.
Reporting in EN, NL & FR · fixed price, fixed scope