HatchetSec is a UK penetration testing consultancy helping organisations find and fix security weaknesses across their technology, people and processes.
Our core services are below, but engagements are tailored to what you need tested. If it isn't listed, get in touch.
Manual assessments of web apps and APIs covering the OWASP Top 10, business logic, and authentication and authorisation weaknesses.
Network testing to identify exposed services, misconfigurations and paths to compromise across on-premises and internet-facing estates.
Assessment of AWS, Azure and Google Cloud environments, focusing on identity, configuration and privilege escalation paths.
Assessment of embedded devices, firmware and industrial control system components.
iOS and Android application assessments covering local storage, API communication and platform-specific weaknesses.
Phishing campaigns and physical social engineering exercises that test people and process alongside technology.
HatchetSec provides hands-on penetration testing with experienced testers involved at every stage, from scoping through testing to reporting.
Our testers hold industry certifications from Crest, OffSec, The Cyber Scheme, PwnedLabs, ZeroPoint Security, Hack The Box, alongside other mobile and cloud security qualifications, and are active in responsible vulnerability disclosure research programs.
Tell us what you need tested and we'll come back with a proposed scope. All engagements are carried out under a formal scope of work and written authorisation.