Thinking like the attacker
Operators chain vulnerabilities into attack paths. Creative exploitation, lateral thinking, the judgment calls that define a real pen test.
Every engagement is led by someone who has spent their career breaking into networks.
- Offensive security testing.
- Threat‑informed.
- Research‑backed.
- Compliance‑ready.
How we work differently.
Offensive security only works when it reflects how real attackers operate. Human creativity. Deep target knowledge. The discipline to chain findings into something that matters.
Threat-informed, not generic
We research the threat actors targeting your sector and build engagements around their techniques. Tested against the playbooks you actually face.
Findings you can act on
Every finding: proof of exploitation, business impact, and a remediation path. We walk your team through it.
We stick around
The engagement does not end at report delivery. We help with triage and re-test your fixes. If something is still exploitable, we tell you.
What our research found.
7
articles and advisories published since May 2026.
Read it 800organisations assessed, approximately, in our Europe-wide campaign on exposed VPNs.
Read it 9publicly known vulnerable drivers still loaded on a fully hardened Windows 11 endpoint.
Read it 1open-source toolkit for Active Directory ACL abuse, released for the community.
Read it
Our vision
OFFCEPT exists to deliver security testing that changes how organisations defend themselves. Engagements that chain findings into real attack paths and deliver results your team can measure.
Every engagement led by someone who thinks like the attacker, improvises when the plan does not work, and explains what happened so your engineers stop it next time. That is the standard.
Rui PedroFounder & Lead Operator