Services

End-to-end adversary simulation against defined objectives, with stealth as a requirement and honest measurement of your detection capability.

Offensive assessment of exposed surface, applications and internal network, with manually verified exploitation and the full path to domain administrator.

Assessment in plants, hospitals and critical infrastructure where availability is not negotiable: passive techniques by default and windows agreed with operations.

Live incident intervention or post-incident analysis: entry vector, scope of compromise and attacker dwell time, with evidence that holds up before a third party.

Expert reports for proceedings before any Spanish court, rebuttal of opposing expert evidence and testimony at the hearing, with notarised acquisition where the procedure calls for it.

Human attack surface mapped from open sources, with targeted campaigns measured by click, credential and execution, and a physical vector where scope allows.

Offensive assessment of assistants, agents and RAG systems in production: indirect injection, corpus leakage, tool abuse and exfiltration through the output channel.