Mauritius · Offensive Security · 2026
offensive
Penetration Testing
AI / LLM Security Assessment
Security testing of LLM-backed applications: prompt injection, jailbreaks, insecure output handling, sensitive data leakage, and tool/agent abuse. Aligned to the OWASP Top 10 for LLM Applications.
Web & API Penetration Test
OWASP-aligned deep manual testing across web apps and REST/GraphQL APIs: IDOR, injection, auth bypass, business logic flaws, mass assignment. Includes a complimentary attack surface report.
Assumed Breach & Network Penetration Test
Assumed-breach and network testing across Windows and Linux estates. We escalate privileges, move laterally, and reach your crown jewels using real Active Directory and *nix attack chains.
Cloud Penetration Test
Active exploitation of your cloud estate across Microsoft 365, Azure, and AWS. We attack identity, escalate through roles and managed identities, steal tokens, and pivot between cloud and on-prem to reach real access.
DEFENSIVE
Security hardening
Azure & O365 Configuration Review
Tenant-wide review of Azure and Microsoft 365:
Entra ID, Conditional Access, privileged roles, exposed storage, and the identity misconfigurations attackers pivot through.
AWS & GCP Configuration Review
Cloud posture review across AWS and GCP: IAM policy sprawl, public buckets, exposed metadata, over-permissive roles, and privilege escalation paths through the control plane.
Security Hardening
Benchmark-driven hardening for Windows and Linux servers: CIS baselines, attack surface reduction, service and privilege lockdown, and logging & detection uplift. Verified, not just recommended.
OSINT & Attack Surface Report
Zero-knowledge external reconnaissance: shadow assets, subdomains, exposed services, leaked credentials, and metadata. We map everything an attacker can see before they act.
Credentials & training
Backed by industry-recognized certifications.
Because continuous training is essential to staying ahead of evolving attack techniques and modern threat landscapes.
Start with a free scoping call
We will understand your environment, identify the right engagement type, and provide a clearly scoped proposal. No commitment required.