Six ways to work with us, scoped to what you need

01 · Solution

Compliance Pentest

A scoped penetration test of your web apps, APIs, cloud or network, with a report written for auditors and enterprise buyers. AI agents cover the breadth; our engineers exploit and chain the findings that matter. Our team holds OSCP and CISSP certifications.

For: Teams that need a pentest for SOC 2, ISO 27001, PCI DSS or an enterprise customer.

Not ready for a call? Run a free scan with DSO ↗ Free plan, no card: SAST, SCA with reachability, IaC and secret scanning, unlimited seats and repositories.

02 · Solution

Recurring & Continuous Pentest

Pentesting on the cadence you ship at: recurring engagements, such as quarterly, or continuous testing on a schedule you set. Scheduled scans and agentic pentests run between engagements, and our engineers review what they find and test major releases by hand.

For: Product teams that ship often and are asked for security evidence all year.

03 · Solution

Managed AppSec & Detection

We run application security for you: detection across code, dependencies, packages and APIs, triaged by our engineers, with fixes your team approves.

For: Engineering teams without a dedicated AppSec engineer.

Scope: This covers what your engineers build and ship. It is not an IT SOC, endpoint MDR or 24/7 monitoring of your network and devices.

Not ready for a call? Run a free scan with DSO ↗ Free plan, no card: SAST, SCA with reachability, IaC and secret scanning, unlimited seats and repositories.

04 · Solution

Agentic AI Security

Assess, test and engineer controls for the AI agents, MCP servers and LLM features you run: what they can reach, under whose authority, what needs approval, and how every action is logged.

For: Companies giving AI agents access to code, data, infrastructure or customers.

05 · Solution

Security Engineering Projects

Fixed-scope projects where we build the controls with your team and hand them over: pipelines, access, supply chain and cloud. You end up with controls your engineers can run.

For: Teams that know what is missing and need senior engineers to implement it.

06 · Solution

Fractional CISO

Security leadership without a full-time hire. Our CEO, Zeeshan Sultan, leads your security programme, backed by an advisory board of practitioners from banking, healthcare and govtech. Our team holds CISSP, CISM and CCSP certifications.

For: Companies facing audits, regulators or enterprise buyers without a security leader.

Scope: Incident response here means planning and rehearsal. We don't offer an incident response retainer.

Pricing

How engagements are priced

We don't publish a rate card, because no two estates are the same. Every engagement is quoted after a scoping call, based on what we would actually test.

You receive a written proposal with a firm quote before any work starts. Any change in scope is agreed with you in writing first.