Find your vulnerabilities before an attacker does.

A penetration test (pentest) is an authorised simulated cyberattack performed by cybersecurity experts. The goal is to identify exploitable vulnerabilities before a real attacker does, then provide a clear and prioritised remediation plan.

Duration depends on scope. A standard web application pentest typically takes 5 to 10 working days. A network infrastructure test is often scoped at 5 to 15 days. We define the appropriate duration together during the initial scoping phase.

In black box testing, experts have no prior information about the target. In grey box — our default approach — test credentials and limited access are provided to maximise functional coverage. In white box, source code and full technical documentation are shared.

Yes, some providers (AWS, Azure, OVH…) require prior notification for security tests on their infrastructure. We guide you through this process systematically during the scoping phase.

An engagement is broken into four phases. First, scoping: defining the perimeter, rules of engagement and required accesses. Then reconnaissance and exploitation: our experts follow recognised methodologies — including the OWASP Top 10 for web applications — to map the attack surface, identify vulnerabilities and exploit them in a controlled manner. Next, report writing: an executive deliverable summarising the risks and a technical deliverable detailing each vulnerability with its CVSS severity score and remediation steps. Finally, an optional retest to verify that the fixes have been correctly applied.