Security Department

This is what an intruder sees when they look at your company.

Check it yourself with My Security Department, our self-service audit platform, or have us attack it under controlled conditions. Pick any system on the map.

Show what is covered by

My Security Department: the audit you run yourself

A self-service platform that checks your own systems and the vendors you depend on, then gives you one To do list in the order we would fix things. Every item says why it matters, who usually fixes it, and how long it takes.

What lands on your To do list

Examples from a demo account

    Nothing is scanned until you prove it is yours

    You verify each address with a DNS record, a file on the server, or a signed letter of authorisation. Private addresses can never be added.

    Fixes come with instructions

    Each finding opens a fix guide with a ready-made email for your IT provider. Mark it fixed and the next check confirms it.

    Built for IT providers too

    If you look after several small businesses, one console shows every client's open items, and reports carry your name.

    Create your account Sign in You need a company name and a work email.

    When you need a person, not a scan

    My Security Department tells you a door is open. It will not walk through it. Our consultants run real-world attacks to show what an intruder could actually do once inside.

    Network and infrastructure penetration testing

    Real-world intruder attacks against your network and the applications on it. We take an in-depth look at your network, the security controls already in place, and the gaps you need to address. Any public services we identify are analyzed further for the additional risk they pose.

    Web and application penetration testing

    Real-world intruder attacks at the application level, run with the access a general internet user would have and following the OWASP Testing Guide.

    Secure code audit

    A detailed review of all source code to uncover security risks. This is time-consuming work and we give it close attention, because it takes more than reading the language. It takes understanding the architecture of the whole application.

    How a consulting engagement runs

    1. Planning

      We review your documentation, identify the targets to test, and work out the attack scenarios.

    2. Exploitation

      Using what we learned in planning, we run scans and manual investigations to find out whether each target is vulnerable.

    3. Reporting

      We analyze the results, assign a risk to every finding, document the details, and walk your team through them.

    Start checking today.

    Create a My Security Department account, add your domain, and see what is exposed before anyone else does.

    Create your account

    Or tell us what needs testing.

    Send us the scope you have in mind and we will reply with a quote.