Enterprise Cybersecurity & Risk Management
Cyber Sec delivers custom pentesting tools, vulnerability research and exploit development, code and open-source audits, vendor product testing, and detection engineering for organizations that cannot afford compromise. We operate with precision, discretion, and a singular focus: proving where you're exposed, then helping you close it.
// what we do
Focused service lines — each scoped to your environment, delivered with evidence-based reporting, and backed by certified specialists who operate with precision.
Bespoke offensive tooling built for your targets and rules of engagement — recon frameworks, exploit chains, and C2 tooling in Rust, Go, C and Python.
Manual, security-focused source code review for vulnerabilities, logic flaws and supply-chain risk — not just automated scanning.
Independent assessment of third-party products and appliances before you trust them in production, so procurement decisions are based on evidence.
Original security research that goes beyond scanning — zero-day discovery, reverse engineering, and working exploit development against the software you build or depend on.
// why cyber sec
What sets Cyber Sec apart is how we deliver — rigorous methodology, verifiable expertise, and a commitment to outcomes that your team can act on.
CompTIA Security+, Network+, A+, CSIS and CIOS, plus Fortra Clearswift and Azure Fundamentals — and, more usefully, 300+ public tools and research projects you can review before you sign anything.
No automated scanner noise. Every finding is manually reproduced, documented with business impact, and accompanied by concrete, prioritized remediation steps.
Fixed scope, fixed price, with clear deliverables and timelines. You know exactly what you're getting, when you'll get it, and what it costs — before work begins.
Post-engagement reviews, re-testing after remediation, and structured knowledge transfer to your internal teams — so security capability compounds, not expires.
// case study
Full-scope penetration test of a public-sector organisation. Found 36 vulnerabilities — 18 critical, including a collaboration platform running in production more than eight years past end-of-life. Retrieved national identity numbers and personal records from an unsecured server — a reportable personal-information breach under POPIA.
Achieved domain admin by exploiting a long-patched SMB vulnerability on a forgotten legacy Windows host, and extracted 5 staff credentials. Bypassed physical access control at reception and reached a restricted office undetected. The wireless network used obsolete encryption alongside an open guest SSID. DMARC was monitoring-only — outbound mail was fully spoofable. Not one alert was raised.
White-box penetration test across 3 subnets of an internet and managed service provider. Extracted 27 employee password hashes from 10 unique accounts across 8 mounted VMs — all sharing an identical hash. Pulled a complete perimeter firewall configuration including 17 encrypted credentials, a customer's directory bind account, 9 VPN users, 3 RADIUS secrets, and 5 SSL private keys.
Discovered 50+ virtual disk images on unauthenticated NFS shares — complete backup repositories including a multi-terabyte corporate mail database. Mapped 4 Active Directory domains with 21 Windows hosts — all enumerated without credentials. The exposure chain cascaded to 7 downstream organisations across the public sector, transport, manufacturing and financial services.
// the receipts
Every service on this page is backed by tooling we have actually built. Over 300 projects — frameworks, exploits, reverse-engineering work and detection tooling. This is the same code we build engagements on.
Modular exploitation framework. Began as a Rust rewrite of routersploit and grew well past it — the backbone of our custom tooling work.
Command-and-control server in Rust built around a disclosed Firefox exploit — written to test whether a defender's tooling actually catches the channel.
Clean-room reimplementation of the H3C SSL VPN client — protocol reversed from the wire, then rebuilt as fully open source.
Published proof-of-concept exploits from independent I2P research, disclosed March 2026. Reproducible, not theoretical.
Working PoCs against gSOAP 2.7 — the kind of embedded-stack vulnerability research that vendor product testing turns up.
SOC video wall on a Raspberry Pi 5 — Wazuh, Zabbix and Grafana panels with Vaultwarden-backed auto-login and an autossh jump tunnel.
Long-form reverse engineering: 27 subsystems mapped, 6,511 functions named, 85.2% of attribute hashes cracked, working mod SDK.
RFID/NFC card security assessment guide — Proxmark3 methodology for Mifare, HID, iCLASS and NTAG, used on physical engagements.
// common questions
Six focused service lines: custom pentesting tools, vulnerability research and exploit development, code audits, open-source security audits, vendor product security testing, and detection engineering and SOC build-out. Every engagement is scoped and authorized in writing before any work begins.
Yes. Original research — zero-day discovery, reverse engineering, and protocol analysis — plus reproducible proof-of-concept exploits against the software you build or depend on, with responsible disclosure where third parties are involved.
Yes, on a project basis. We design, build, tune, and hand over your monitoring stack — Wazuh or Elastic SIEM, log-ingestion pipelines, and DFIR automation fitted to your environment. It is built, documented, and yours to run — not a managed subscription.
Software teams, product vendors, and organisations that need hands-on offensive security and detection engineering. Every engagement is scoped to your specific stack and threat model.
Code audits are manual, line-level security reviews — not automated scans. We identify vulnerabilities, logic flaws, and supply-chain risks, then deliver prioritized findings with business impact analysis and concrete remediation steps. Re-testing after fixes are applied is included.
Yes — that is the point of the section above. Over 300 public tools and research projects, including Rustsploit, clean-room reverse engineering of an enterprise SSL VPN client, independent I2P and gSOAP proof-of-concept exploits, and SOC tooling. The tooling described on this site is the same work we build engagements on.
// start the conversation
Whether you need custom tooling, a code audit, vulnerability research, or a detection stack built and handed over — we're ready to scope the engagement.
Authorized testing only. We require written authorization before any assessment begins.