Chart your attack surface before someone else does.
Source code audits, penetration tests and hardened Ubiquiti networks. Founder-led and evidence-driven, delivered through an end-to-end encrypted client portal where every finding, and how findings chain together, stays in front of you.
- 09:02:11 recon scope loaded · 3 web apps, 1 API, 2 VLANs
- 09:14:37 recon subdomain enumeration → 41 hosts, 6 in scope
- 09:48:05 finding F-01 verbose stack trace on /api/v2/exportmedium
- Founder-ledThe person who scopes it tests it and writes the report
- Standards-basedPTES · OWASP WSTG & ASVS · CVSS v4.0 · CWE
- Attack chainsFindings linked into the paths an attacker would take
- Encrypted deliveryReports and files sealed with keys only you hold
Three disciplines, one goal: fewer ways in.
Whether it is your code, your running application or the network underneath it, the work is done by hand, scoped to your risk, and explained in terms your developers and your management can act on.
Source code audit
Manual, line-by-line review of the code that matters most, assisted by static analysis rather than replaced by it.
- Authentication, session and authorisation logic
- Injection, deserialisation and input handling
- Cryptography misuse and secrets management
- Memory safety, concurrency and unsafe code
Penetration testing
Realistic attacks against your web applications, APIs and infrastructure — with every step documented and reproducible.
- Web applications and single-page apps
- REST and GraphQL APIs, mobile back-ends
- External perimeter and exposed services
- Internal network and segmentation testing
Network implementation
Secure-by-design Ubiquiti UniFi networks for offices and multi-site businesses — planned, deployed and documented.
- VLAN segmentation and zone-based firewalling
- Site-to-site and remote-access VPN (WireGuard)
- Wi-Fi with WPA3, guest isolation and RADIUS
- Hardened management plane and firmware policy
Severity isn't additive. Attack paths are.
A "medium" information leak is often what leads to the critical one. Every Portolan Sec report links findings into an exploitability graph, so you can see which small fix breaks the whole chain.
- Findings scored with CVSS v4.0 and mapped to CWE and OWASP
- Adjust exposure to your context with environmental metrics, and record your risk decision
- Discuss each finding with the tester, directly in the portal
- Export a signed-off PDF report at any time, or pull everything through the API
Fixing F-02 breaks both chains: the critical SQL injection and the management VLAN are no longer reachable from the internet.
From scoping call to verified fix.
- 01
Scope
A call to understand your system, your threats and your constraints. You get a written scope and rules of engagement.
- 02
Assess
Hands-on testing or review. Critical findings are published to your portal as soon as they are confirmed.
- 03
Chain
Findings are linked into attack paths so you see which weaknesses enable the most damaging ones.
- 04
Report
Executive summary, technical detail and remediation guidance — in the portal, as PDF and through the API.
- 05
Retest
Once you have fixed, we verify. Status and history stay in the portal for your auditors.
We handle your secrets like we'd want ours handled.
Files you exchange with us are encrypted in your browser before they leave your machine, using keys generated on your device. Our server stores ciphertext only and deletes files automatically after 30 days.
How the portal protects your data →your browser portolan server ┌──────────────┐ ┌───────────────────┐ │ file │ AES-256 │ ciphertext only │ │ └─ key K ───┼──RSA-OAEP─▶ K wrapped for each │ │ private key │ 4096 │ authorised person │ │ (never sent)│ │ auto-delete: 30 d │ └──────────────┘ └───────────────────┘
Planning a release, an audit or a new site network?
Tell us what you are building. You will get a straight answer on scope, approach and timing.
Get in touch