Having a well-defined cybersecurity strategy is proven to help you deter, identify, and respond to cyberattacks. Our team of security experts will conduct threat modelling exercises and identify adversaries and threats specific to you. Then, we’ll help you to formulate a robust cybersecurity plan to shield your assets.

During the strategy formulation phase, you’ll tell us what our ethical hackers can and cannot test. For example, you may ask our team to test your mobile phone’s security, but exclude your email accounts and Wi-Fi networks from our assessment. We’ll only test what you ask us to, and under no circumstances will we attempt to gain access to any device or system out with our agreed scope.

The first step in any successful cyberattack is OSINT, otherwise known as open-source intelligence. Cybercriminals will often heavily research your website, social media channels, and online footprint before launching an attack. Even the simple act of uploading an image to your website can be enough for hackers to pin point the exact coordinates of where the photograph was taken!

Therefore, regular OSINT reviews are a crucial element of our executive security package. Through the use of automated tools and manual investigations, our experts will collect publicly exposed information about your organisation, reduce the amount of sensitive information about you floating around on the internet, and help you to enforce information disclosure policies.

After our OSINT review is complete, our team of ethical hackers will attempt to gain access to your phones, computers, email accounts, and social media accounts. The means by which we do this are discussed beforehand, and we never perform exploits that unnecessarily dangerous to your devices.

For example, our ethical hackers can create both broad and targeted phishing campaigns consisting of emails, phone calls, and even in-person visits where appropriate. We’ll then send out a variety of phishing emails, SMS messages, and phone calls to you and those close to you, and attempt to infiltrate your devices. Everyone that’s targeted in our assessments must give written permission beforehand.

Some of the phishing campaigns we send will be simplistic in nature and they should be easy to detect. Others will be highly sophisticated  and are designed to bypass anti-virus software. Our goal is to identify how robust your security is against a variety of exploits and attack techniques, and to identify which areas of your I.T infrastructure require increased security.

Rest assured, no malware will be installed on your computer systems when carrying out our simulated attacks, and your personal information will be kept strictly confidential. 

After our assessments are complete, we’ll upload our report to your client dashboard. Your report will be visible only to you and we have strict security measures in place to protect sensitive information from unauthorised 3rd parties. Upon receiving our report, our team will contact you and explain what vulnerabilities we found, give each vulnerability a risk rating, and work with you to mitigate the most dangerous security risks we identified. 

Finally, we’ll work with you to mitigate the most serious security vulnerabilities we find. This could involve using anonymisation services to protect against eavesdroppers monitoring your internet traffic, installing intrusion detection systems, and firewall configurations.

We’ll implement a ‘defence in depth’ approach; with multiple layers of protection placed between your assets and your adversaries. The choice of methods and technologies we deploy are entirely dependant on the needs of our clients, with each client receiving tailored solutions.