Independent since 2018. DevSecOps, cloud and infrastructure architecture, penetration testing and technical recruitment — for banks, government, healthcare and technology companies across Europe and the US. The person who scopes your work is the person who does it.
Practices
We'd rather be the right answer for a narrow set of problems than a plausible answer for all of them.
Perimeter
Manual, scoped testing of applications, networks and cloud estates. Findings come ranked by what an attacker would realistically do next, with reproduction steps and a fix — not a scanner export with the severity column sorted.
Platform
The platform underneath your product: network segmentation, identity and trust boundaries, infrastructure as code, and migrations planned so the cutover isn't the risky part.
Pipeline
Security controls that live inside the pipeline instead of blocking it at the end. Scanning wired into CI with policy that fails builds on real findings and stays quiet the rest of the time, so developers keep trusting it.
People
Hiring support from people who can read the code. We screen for engineers in the same fields we work in, so the shortlist is short and your technical interview isn't the first real filter.
Approach
01
We work through what needs doing and why, directly with the people who own the system. Fast, and without a discovery phase you pay for separately.
02
Resources, milestones and the business objective, written down and agreed before anyone starts building or testing.
03
The consultant who scoped it does the work. Tailor-made tooling, a platform build, or a full assessment of your security posture — same people throughout.
04
You get the artifacts: documentation, runbooks and the reasoning behind each decision, so your team can carry it forward without us.
Why a small firm
You talk to the engineers. The person who scopes your project is the person who delivers it, and they stay reachable after handover.
Consultants working across development, infrastructure and offensive security, so a problem doesn't get handed off at the boundary between them — which is usually exactly where it lives.
New ideas turned into something scalable, and legacy systems brought forward without a rewrite you can't justify.
Contact
Or what isn't yet. Scoping conversations are free and usually short — we'll tell you quickly if we're not the right fit.