01 · Core
Web Application Penetration Testing
Deep OWASP-aligned manual testing. SQLi, XSS, SSRF, auth bypasses, and complex business logic flaws automated scanners never find.
02 · Core
Mobile Application Security Testing
iOS and Android MASVS-aligned testing — static/dynamic analysis, Frida hooking, cert pinning bypass, insecure storage.
03 · Core
Cloud Security Assessment
AWS, Azure & GCP misconfigurations, IAM privilege escalation, exposed buckets, and full attack path mapping.
04 · Core
API Penetration Testing
REST, GraphQL, SOAP & gRPC. BOLA/BFLA, mass assignment, JWT attacks, OAuth bypass, rate limit evasion.
05 · Advanced
Red Team Operations
Full APT simulation — phishing, custom C2, lateral movement, AD attacks. Test your detection and response capabilities.
06 · Core
Network & Infrastructure Testing
Internal and external network testing. Firewall review, AD security, wireless testing, VPN assessment.
07 · Specialised
IoT & Embedded Security
Firmware extraction, hardware interface testing, RF protocol analysis, OTA mechanism assessment.
09 · Continuous
Attack Surface Management
AI-powered continuous discovery — shadow IT, forgotten assets, leaked credentials, exposed services 24/7.
Toolset