What We Do
The Process
Latest Posts
[Advisory]TIBER-EU and DORA: What Financial Institutions Need to Understand Before the Notification Arrives
[Advisory]NIS2 Compliance in Portugal: Evidence Over Documentation
[Technical Research]Killing EDR visibility at the kernel: BYOVD
[Technical Research]ACL Abuse Havoc, a BOF toolkit for AD ACL exploitation via Havoc C2
Built by operators. For operators.
Every engagement is led by someone who has spent their career breaking into networks. Operator-led. Threat-informed. Built to change how you defend yourself.
What drives us
Offensive security only works when it reflects how real attackers operate. Human creativity. Deep target knowledge. The discipline to chain findings into something that matters.
Operators chain vulnerabilities into attack paths. Creative exploitation, lateral thinking, the judgment calls that define a real pen test.
We research the threat actors targeting your sector and build engagements around their techniques. Tested against the playbooks you actually face.
Every finding: proof of exploitation, business impact, and a remediation path. We walk your team through it.
The engagement does not end at report delivery. We help with triage and re-test your fixes. If something is still exploitable, we tell you.
Offensive
Security Testing
Threat
Informed
Research
Backed
Compliance
Ready
Our Vision

Founder & Lead Operator
OFFCEPT exists to deliver security testing that changes how organisations defend themselves. Engagements that chain findings into real attack paths and deliver results your team can measure.
Every engagement led by someone who thinks like the attacker, improvises when the plan does not work, and explains what happened so your engineers stop it next time. That is the standard.
Certified by the best







Get in touch to discuss scope, timeline, and what an engagement would look like for your environment. No pitch decks, no sales process. Just a conversation with someone who does this for a living.
Get In Touch