About Us

Founded in 2019, Exosec is a penetration and security testing consultancy with a client-centric ethos. Fostering lasting partnerships with our clients built on trust and reliability. Our approach is rooted in the belief that every client is unique, Exosec tailors solutions to suit your organisation's operational landscape. Embracing this philosophy, Exosec transcends the one-size-fits-all mindset.

Exosec's commitment extends to simplifying the complexities of cyber security. Recognising what can at times seem like an overwhelming nature of cyber security intricacies, especially for those unacquainted with technical terms, the company takes pride in its clear, concise and accessible communication. This dedication to clarity ensures that insights into our client’s cyber security risks can result in well-informed decisions. The culmination of these efforts has solidified Exosec's role as a trusted security partner.

Meet the team

Allow us to introduce our exceptional team of dedicated professionals.

Paul Jones

Managing Director

paul.jones@exosec.co.uk

Andy Tetley

Security Consultant

andy.tetley@exosec.co.uk

Michael Loughlin

Security Consultant

michael.loughlin@exosec.co.uk

Why Exosec?

Our mission is to help our clients strengthen their security posture and better protect their business from cyber attacks. We achieve this by providing reliable and comprehensive penetration testing services.

Simple

Cyber security can be a complex subject, which is why our reports are straightforward and easy to understand.

Reliable

Our clients trust us because of our unwavering commitment to their security needs.

Experienced

Exosec is a team of certified professionals with a wealth of experience and knowledge.

Tailored

Every client is unique, our services are moulded around you and the way your organisation works.

Our Services

Exosec offers an extensive array of security testing and engagements, catering to both remote and on-site needs as per your requirements. To maintain real-world accuracy, we exclusively utilise publicly available tools and techniques during the engagements, ensuring results that truly reflect the actions of a genuine adversary. Our seamless and consultant-led approach makes engaging with Exosec straightforward and hassle-free.

Infrastructure Testing Service

AWS Security Review Azure Security Review Client/Server Build Review External Infrastructure Testing Firewall Security Review Internal Infrastructure Testing Microsoft 365 Security Review Network Device Configuration Review Vulnerability Assessment Wireless Network Security Testing

Application Testing Services

API Penetration Testing Desktop (Binary) Application Testing Mobile Application Testing Source Code Security Review Web Application Testing

Attack Simulation

Insider Threat Physical Security Assessment Social Engineering Services

How it works

We take immense pride in our commitment to delivering streamlined and highly effective methodologies, carefully designed to eliminate any unnecessary complexities. You will work directly with the dedicated security consultant assigned to your engagement, fostering a seamless and productive collaboration.

Contact Us

Initial consultation.

Upon receipt of your enquiry, we will promptly arrange an initial consultation with you to delve into your company’s goals, objectives and security concerns. This conversation will provide us with the opportunity to gain a comprehensive understanding of your organisation’s individual requirements, enabling us to tailor our recommendations precisely to your needs.

Scoping meeting

During our scoping meeting, we will cover the systems, applications, networks and assets earmarked for testing with a focus on understanding the criticality of these assets to your business. If there are specific concerns around penetration testing these can be discussed and can be used to establish boundaries to the engagement (i.e. testing window, out of scope systems, prohibited actions).

We will define communication channels and contacts for findings, updates, and issues. Lastly, we will outline the format of the penetration testing report, specifying technical depth, executive summary and recommended actions.

Following the scoping meeting a statement of work along with commercials will be sent over for review and approval. At this point the test can be booked in for your preferred dates.

Security testing takes place

You will remain in regular contact with your Exosec consultant throughout the testing process. Your assigned tester will commence the production of your organisation’s cyber security report.

Remediation recommendations

We will share and discuss your comprehensive cyber security report. Your report will include well-defined and actionable recommendations to assist your team in efficiently addressing the identified vulnerabilities.

START A PROJECT

Let's discuss how we can work together

Contact us and enhance your security.