Resources

Plan, pass and prove your next security test.

Free checklists, a sample report, engagement stories and research. No forms, no gates.

Guides and Checklists

Practical, one-page, free

Twenty items to settle before a penetration test starts, so testing time goes to finding vulnerabilities instead of chasing access.

What auditors look for in a SOC 2 penetration test, and how to prepare so the report works as audit evidence the first time.

A 40-page sample report with 13 findings, so you know what you are buying.

Proof before you buy

Six phases from scoping call to signed attestation.

Red team, physical and penetration test engagements, anonymized.

The commitments that hold on every engagement.

Research and notes from engagements

Write-ups on vulnerabilities, attack techniques and what we are seeing in client environments. New posts appear here and on the blog.

Tell us the deadline and the framework. We will scope it in 20 minutes.