One adversary mindset, applied across every surface an attacker can reach. Each row links to the service that owns it — depth scales from a focused assessment to a full-scope red team.

What we test
Surface ╲ Test	Recon & ASM	Vuln assessment	Penetration test	Red team	Hardening review	Continuous monitoring
Web apps & APIs OWASP WSTG, auth & business logic	Recon & ASM: Core capability	Vuln assessment: Core capability	Penetration test: Core capability	Red team: Core capability	Hardening review: Core capability	Continuous monitoring: Available / scoped
Core capability Recon & ASM · Vuln assessment · Penetration test · Red team · Hardening review Available / scoped Continuous monitoring Web apps & APIs
External attack surface Domains, subdomains, shadow IT	Recon & ASM: Core capability	Vuln assessment: Core capability	Penetration test: Available / scoped	Red team: Available / scoped	Hardening review: Available / scoped	Continuous monitoring: Core capability
Core capability Recon & ASM · Vuln assessment · Continuous monitoring Available / scoped Penetration test · Red team · Hardening review External attack surface
Cloud & containers AWS · Azure · GCP · Kubernetes	Recon & ASM: Core capability	Vuln assessment: Core capability	Penetration test: Core capability	Red team: Available / scoped	Hardening review: Core capability	Continuous monitoring: Available / scoped
Core capability Recon & ASM · Vuln assessment · Penetration test · Hardening review Available / scoped Red team · Continuous monitoring Cloud & containers
Internal network & AD Lateral movement, privilege paths	Recon & ASM: Core capability	Vuln assessment: Core capability	Penetration test: Core capability	Red team: Core capability	Hardening review: Available / scoped	Continuous monitoring: Available / scoped
Core capability Recon & ASM · Vuln assessment · Penetration test · Red team Available / scoped Hardening review · Continuous monitoring Internal network & AD
Source code & supply chain SAST, SCA, SBOM, build integrity	Recon & ASM: Available / scoped	Vuln assessment: Core capability	Penetration test: Available / scoped	Red team: Out of scope	Hardening review: Core capability	Continuous monitoring: Core capability
Core capability Vuln assessment · Hardening review · Continuous monitoring Available / scoped Recon & ASM · Penetration test Out of scope Red team Source code & supply chain
AI / LLM systems Prompt injection, RAG, agents	Recon & ASM: Available / scoped	Vuln assessment: Core capability	Penetration test: Core capability	Red team: Core capability	Hardening review: Core capability	Continuous monitoring: Available / scoped
Core capability Vuln assessment · Penetration test · Red team · Hardening review Available / scoped Recon & ASM · Continuous monitoring AI / LLM systems
Mobile applications iOS & Android, API back-ends	Recon & ASM: Available / scoped	Vuln assessment: Core capability	Penetration test: Core capability	Red team: Available / scoped	Hardening review: Core capability	Continuous monitoring: Out of scope
Core capability Vuln assessment · Penetration test · Hardening review Available / scoped Recon & ASM · Red team Out of scope Continuous monitoring Mobile applications
People (social engineering) Phishing, vishing, pretexting	Recon & ASM: Core capability	Vuln assessment: Out of scope	Penetration test: Core capability	Red team: Core capability	Hardening review: Available / scoped	Continuous monitoring: Available / scoped
Core capability Recon & ASM · Penetration test · Red team Available / scoped Hardening review · Continuous monitoring Out of scope Vuln assessment People (social engineering)
Wireless & physical Wi-Fi, badge, on-site access	Recon & ASM: Core capability	Vuln assessment: Available / scoped	Penetration test: Core capability	Red team: Core capability	Hardening review: Available / scoped	Continuous monitoring: Out of scope
Core capability Recon & ASM · Penetration test · Red team Available / scoped Vuln assessment · Hardening review Out of scope Continuous monitoring Wireless & physical
OT / IoT & embedded Devices, firmware, protocols	Recon & ASM: Core capability	Vuln assessment: Available / scoped	Penetration test: Available / scoped	Red team: Available / scoped	Hardening review: Available / scoped	Continuous monitoring: Out of scope
Core capability Recon & ASM Available / scoped Vuln assessment · Penetration test · Red team · Hardening review Out of scope Continuous monitoring OT / IoT & embedded

Core capability
Available / scoped
Out of scope

Coverage shown is indicative — exact depth, methodology and rules of engagement are agreed during scoping.

Sample report See what you actually get A complete sample report — evidence-backed findings from Critical to Low, CVSS scoring, OWASP mapping and a remediation roadmap. Learn more Scope a test Build a scoped brief in a minute Pick engagement type, targets and compliance driver — get a brief you can send straight to us. Learn more