~/career/services
Five engagement types, run under written rules of engagement. Every one ends with findings someone can act on — not a scanner export with a logo on it.
01 · Offense
Full-scope black-box testing across web applications, mobile applications, APIs and infrastructure. Reconnaissance automation built for your environment, findings chained to demonstrate real impact, every one verified by hand.
02 · Offense
Where a penetration test asks how much is broken, this asks whether anyone notices. Objective-driven simulation against a defended estate, testing your detection and response as much as your systems — with a debrief covering what fired, what did not, and why.
03 · Defense
Wazuh SIEM/XDR deployed, tuned and handed over working — custom rules and decoders written against what your estate actually runs, automated malware detection and quarantine, WAF, and deception nodes to catch what the rules miss. Then I attack it, so you know it holds.
04 · Defense
An assessment of where you stand: access architecture, hardening, legacy services still listening, what is documented and what is not, and how ready you are to respond when something happens. Delivered as prioritised work, not a maturity score.
05 · Ongoing
Security is not a project that finishes. A retainer covers scheduled testing as the estate changes, continuous detection tuning, and someone to call when something looks wrong at an inconvenient hour.
01 Scope
What is in scope, what is explicitly out, timing windows, escalation contacts, and what happens if something breaks. Written down before anything is touched.
02 Test
Reconnaissance, then surface-by-surface testing, then chaining findings into paths with real impact. Anything critical is reported the moment it is confirmed.
03 Report
A technical report your engineers can act on, and an executive summary stating business exposure and a remediation sequence. Live briefing if wanted.
04 Retest
Fixes verified after remediation. A finding is closed when it is proven closed, not when it is marked done.
I will come back with an approach and a quote. Engagements are priced per scope — no packages, because no two estates are the same size.