/ 01People · phishing simulation & testing
PhishAttack
Phishing that actually gets past MFA — real session capture, not a lookalike page. It answers what awareness courses can’t: could someone walk in with a stolen login today?
Platforms
the platforms we built.
Where the tools we needed for that didn’t exist, we built them.
Four of them. Two test and train the people reading your mail, one filters the mail itself, and one sits in your delivery pipeline — all four on your own infrastructure.
Products
products built around real security questions.
Each one started as something an engagement needed and the market didn’t sell. Two of the four are shown in the interface they ship with; the other two are described rather than dressed up.
talk to an engineer
/ 02People · security awareness training
Sec Awareness
Training that follows a real mistake instead of the calendar. Whoever falls for a phishing test gets the lesson that addresses it, and you can see if behaviour changes.
/ 03People · email threat protection
Phish Guard
Reads incoming mail in context, scores the real risk, and acts on the dangerous ones — without holding up the mail everyone needs to do their job.
How Phish Guard works. Interface screenshots coming soon.
/ 04Code & delivery · managed security gate (ci/cd)
Managed Security Gate
Connects your scanners, sorts what is actually urgent, and enforces the rules inside CI/CD without becoming the reason releases are late.
How Managed Security Gate works. Interface screenshots coming soon.
What holds for all four
our software, your infrastructure.
Your data stays where you put it
Our platforms run on your own infrastructure, so employee and evidence data doesn’t leave your perimeter unless you allow it.
AI proposes, a person signs off
We use AI where it saves real time, triaging findings and spotting anomalies, but a proposed result is never accepted automatically. In forensic work that is a requirement rather than a precaution.
Next step
which question are you trying to answer?
Tell us what you need to know — whether a stolen login would work today, whether training changes anything, what is reaching your inboxes, or what your pipeline lets through. We will say which of these does it and what it needs from your environment.