Break it like a hacker. Fix it like an engineer.

Experienced consultants, augmented by intelligent systems

Expert-led penetration testing, supported by AI-assisted analysis, to uncover weaknesses and strengthen systems against real-world threats

Arrange an expert review

Quick Facts

Founded in

2015

Led by consultants with decades of experience

Trusted by dozens of leading technology organisations globally

One Assessment, Calibrated to Your Threat Model

We deliver a single core service: advanced penetration testing.

‍

Each engagement is tailored by combining three methodologies - dialed up or down based on your environment, threat model, and objectives.

Security Auditing

Pragmatic analysis of source code, binaries, and live systems. Expert manual review, augmented by AI and custom tooling, to uncover what others miss and fortify systems against real-world threats.

‍When we use this:

New product or feature launches · Pre-acquisition due diligence · Periodic security assurance and compliance

View Methodology

Adversary Simulation

Realistic attack simulations that test detection and response. Collaborative purple-team exercises to validate what’s working, expose gaps and weaknesses, and strengthen your response before attackers do

‍When we use this:

High-impact threat validation · SOC & IR response evaluation · Security control assurance

View methodology

Applied Research

Security analysis where existing playbooks fall short. Led by expert researchers with deep field experience, developing custom methodologies for complex and emerging systems with limited public guidance.

‍When we use this:

Novel technology assurance · Safety-critical risk exploration · Research-driven validation

View methodology

elttam Intelligence Platform

Our internal intelligence system

Built from years of research, engineering, and hands-on security work, it augments our consultants with shared insight and AI-assisted analysis strengthening every assessment we deliver.

What all the fuss is about

READ ARTICLE

Latest from Our Resources

VIEW ALL ARTICLES

Matt Jones

September 23, 2026

ATT&CKing TACACS+ to Pwn Your Network via a Pre-Auth RCE

Details a pre-auth format string vulnerability in tac_plus, a popular daemon implementing TACACS+ for network device management, and the shared secret oracle that makes it a practical RCE chain.

tacacs

Luke Jahnke

August 26, 2026

Ruby Marshal Kick-off Gadgets

This post surveys everything Marshal.load calls on its own, on Ruby 4.0.6, and finds six kick-off gadgets, hash, eql?, <=>, to_str, to_s and respond_to?, that were never written for deserialisation and can't be hardened away like marshal_load.

ruby

deserialization

Luke Jahnke

August 14, 2026

Ruby 4.0 Universal RCE Deserialization Gadget Chain

This post releases a new universal chain that turns a single Marshal.load into command execution on Ruby, built with new gadgets from untapped sources as well as old gadgets put to new use.

web

ruby

deserialisation

We work best with:

Organisations building systems that people rely on today and into the future.

Widely used + trusted technologies

Well-known brands and platform providers behind products, services, and infrastructure used at scale - where security failures would have real-world impact.

Builders of emerging technology

Teams developing new or complex systems - including AI-enabled platforms, robotics, aerospace, and other safety- or mission-critical technologies - where established security playbooks don’t yet apply.

Critical Infrastructure

Organisations responsible for essential services - energy, transport, utilities, and communications, where security failures can disrupt communities, safety, and economic stability.

High-growth and scaling teams

Rapidly scaling companies preparing for growth, scrutiny, or change who want a deep, credible assessment rather than a checkbox exercise.

Security product and platform vendors

Teams building security tooling and platforms who want an independent, high-quality assessment from specialists with deep offensive and research experience.

Not sure which assessment you need?

If you know you want a serious, realistic evaluation but don’t yet know whether that means product testing, adversary simulation, or applied research. We can help you pick the right assessment and scope the work - get in touch to start a conversation.

Where our assessments make the biggest impact.

Break it like a hacker. Fix it like an engineer.

Quick Facts

One Assessment, Calibrated to Your Threat Model

Security Auditing

Adversary Simulation

Applied Research

In the News

What all the fuss is about

Latest from Our Resources

ATT&CKing TACACS+ to Pwn Your Network via a Pre-Auth RCE

Ruby Marshal Kick-off Gadgets

Ruby 4.0 Universal RCE Deserialization Gadget Chain