Our products
Alongside our services, we build and run our own security products: enterprise platforms for supply-chain, application and network security, free open-source tools, and published research.
01 · Platforms
Enterprise Products
Platforms your security and engineering teams run every day
Chainsaw
Block malicious packages before they download.
- Stops the attacks behind the headlines
- 25 signals beyond CVEs
- Works offline
DSO
Scheduled code scans, AI pentests, and fixes you approve.
- SAST
- SCA with reachability
- IaC scanning
Acksess
Replace the VPN with access that checks every device.
- Device posture checks
- Rules you can test
- Just-in-time access
02 · Open source
Free Tools
Open-source tools, free to use and free to change
X-Security
One API security policy, compiled to every WAF and gateway.
- Universal schema
- Compile to many targets
- Defence in depth
OpsMaxx
Every server you look after, in one window.
- Workspaces
- Terminal and SFTP, one connection
- Five database engines
LVCScan
Check Laravel applications for known vulnerabilities.
- Laravel detection
- Resource discovery
- Known-CVE catalogue
03 · Papers
Research
What we learn building and breaking security tooling
04 · Public sector
Government
For government and public-sector teams. Closed source, available on request.
Book a call
Book a 30-minute call
Pick a time that suits you. We'll talk through what you're building and where your security stands, then suggest where to start.
Cyphlon
1:1 Consultation Call
An introductory call with our engineers about any engagement: a pentest, continuous testing, managed AppSec, security engineering, agentic AI security or a fractional CISO. We'll ask about your stack, your deadlines and what your customers or auditors expect, and tell you plainly if we're not the right fit.
Get started
Talk to an engineer, not a salesperson.
30 minutes with the engineers who would do the work. We'll tell you what we'd test first, and whether you need us at all.
Free 30-minute consultation · Google Meet