Cybersecurity and
Penetration Testing
Specialists

We test the security of those who protect your infrastructure.

Offensive Operation Advanced Exploitation and Assessment

Forensics Investigation and analysis of digital evidence

Our penetration testing subjects your systems to a rigorous evaluation.

After each evaluation, we provide a technical report with specific recommendations to correct the identified vulnerabilities, strengthen protective mechanisms, and reduce risks that could compromise the security of the infrastructure.

Web
applications.

We examine web application security through specialized penetration testing. We analyze authentication, access controls, sessions, and business logic, validating vulnerabilities such as SQLi, XSS, CSRF, SSRF, and IDOR using controlled exploitation techniques.

Servers &
cloud environments.

We conduct penetration testing on servers, networks, and cloud and hybrid environments. We assess exposed services and ports, CVE vulnerabilities, insecure configurations, IAM controls, and authentication mechanisms. We validate exploitation vectors, privilege escalation, and lateral movement to determine the technical scope of each vulnerability.

Internal &
external networks.

We measure external and internal exposure: ports, protocols, segmentation, firewalls, VPN and services such as SMB, RDP, DNS and SNMP.

API
security.

We verify authorization at the object and function level, BOLA/BFLA, IDOR, mass assignment, authentication, data exposure, injection vulnerabilities and rate limits.

Database
engines.

We conduct penetration testing on SQL and NoSQL engines, examining stored procedures, dynamic queries, data isolation, replication, and schema-level permissions. We verify scenarios for user access, execution of unexpected operations, and information exposure through controlled queries and transactions.

We apply intrusion tactics
used by cybercriminals.

We implement techniques used in real cyberattacks in controlled intrusion scenarios. The operations are designed to explore potential access routes, assess security mechanisms, and analyze how an organization responds to adversarial actions under authorized conditions.

Our own engineering

We develop LeensFish, our cybersecurity technology built on offensive research, international penetration-testing methodologies, and advanced analytical techniques.
It is designed to examine attack surfaces in depth, identify potential vulnerabilities, and investigate behaviours that conventional tools may overlook. LeensFish represents our applied-engineering approach to pentesting, combining in-house development, research, and specialised analysis.

We push the boundaries.Your security.

We identify exposed ports, accessible services, and data routes that an attacker could exploit to gain unauthorized access, expose information, or disrupt operations.

✓ tcp.port in {22, 443, 3306, 5432} || DNS

Valid Filter

IDENTIFIED PORTS AND SERVICES 8 EVENTS · 3 ACTIVITIES

NO.	Time	Origin	Destination	Protocol	Length	Details
492	00:04:22.410	10.24.8.14	10.24.20.10	DNS	92	DNS A query for db-gateway.empresa.local
493	00:04:22.414	10.24.8.14	10.24.20.12	TCP	74	51422 → 5432
494	00:04:22.419	10.24.20.12	10.24.8.14	TCP	74	5432 → 51422
495	00:04:22.425	10.24.8.14	10.24.20.18	TLSv1.3	517	Client Hello, SNI=api.empresa.local
496	00:04:22.431	10.24.8.14	10.24.20.12	PGSQL	122	PostgreSQL Service Identified on TCP 5432
497	00:04:22.438	10.24.8.14	10.24.20.12	PGSQL	86	Validate ACL, TLS, roles and authentication
498	00:04:22.443	10.24.20.18	10.24.8.14	HTTP	128	GET /health · 200 OK
499	00:04:22.452	10.24.20.16	10.24.8.14	SSH	164	Administrative Service Detected / TCP 22

VALIDATED SERVICEDB-01 / TCP 5432

⌄Active assessment statusdb-gateway.empresa.local
⌄Identified servicePostgreSQL 14 / TCP 5432
›Network exposureaccessible from the applications segment
›validation requiredACL, TLS, roles and authentication

EVIDENCE OF SERVICEDB-01 / TCP 5432

active: db-gateway.empresa.local
service: PostgreSQL 14 / tcp 5432
controls: ACL · TLS · roles · audit

Forensic investigationand analysis.

We conduct high-complexity private forensic investigations, integrating advanced technology, network traffic analysis, packet inspection, memory analysis, and correlation of security events.

We thoroughly examine digital activity to track intrusions, identify suspicious connections, reconstruct activity sequences, and determine the scope of cyber incidents. Our investigations adhere to strict confidentiality protocols, digital evidence preservation, and technical rigor.