Security testing services

Security testing across your environment.

Choose a service below, or tell us what needs testing. We’ll help define the scope.

Need testing tied to releases or regular assurance dates? See the annual programme

Published research

See how we document findings.

Our public WebKit research explains the issue, its impact and the fix. Client reports follow the same structure, with evidence and specific remediation.

Read the WebKit analysis

Apple WebKit · CVE-2026-43740

Published cover of The Debrief issue 002: WebKit, Splunk and LiteLLM — The Debrief · Issue 002 · July 2026

// How the engagement works

Engagement shape

Scope, testing, findings, and a review with your team.

A scoping call to understand what you're protecting and what you're worried about. Testing. A written report with reproducible evidence and prioritised fixes.

Most engagements take two to four weeks. We can run them as a one-off or as a recurring programme — if you want the latter, see the annual programme.

// Next step

Scope first

A short note is enough. We reply within one Australian business day.

Send the scope and timing.

Tell us what needs testing, the environment involved, and any deadline. We will respond with the questions needed to define the work.

Start the enquiry → Email directly