OUR SERVICES

Consultant-led penetration testing of internal and external infrastructure, identifying exploitable weaknesses, privilege escalation opportunities and realistic attack paths rather than simply reporting automated scan results.

Manual security testing of web applications and portals, covering authentication, authorisation, session handling, input validation and business logic. Findings are reproduced and validated by an experienced consultant before being reported.

Security testing of RESTful, SOAP and GraphQL APIs, covering authentication, access control, request manipulation, data exposure and business logic weaknesses that may not be visible through the application frontend.

Security testing of Android and iOS applications together with the backend APIs they rely on. We assess both the application itself and the server-side controls protecting users and data.

Consultant-led assessment of Microsoft 365 security across Entra ID, Conditional Access, Exchange, Teams, SharePoint and OneDrive, going beyond Secure Score to examine how controls are configured and operate in practice.

Technical assessment of Azure identities, permissions, networking and cloud resources, with consultant-led investigation of misconfigurations, privilege and access paths that could lead to increased access or compromise.

Internal penetration testing delivered remotely using the Krypsys GHOST appliance, providing a secure and cost-effective alternative where an onsite consultant is not required and helping reduce travel and accommodation costs.

Assessment of VPNs, remote desktop services and other remote access solutions, focusing on authentication, exposure, configuration and the controls governing what users can access after connecting.

Security testing of corporate and guest wireless networks, assessing authentication, encryption, client configuration, network separation and whether wireless access provides an unintended route into internal systems.

Security compliance and assurance support delivered through our long-standing specialist partner, covering frameworks such as PCI DSS, Cyber Essentials and ISO 27001, with Krypsys providing supporting technical security testing where required.

ISO 27001 consultancy delivered through our long-standing specialist partner, supporting organisations with gap analysis, ISMS implementation, risk treatment, certification preparation and ongoing improvement.