Services
Web Application Penetration Testing
Assess security of web apps, APIs, thick clients, low-code platforms, in-house or licensed applications.
Infrastructure Penetration Test
Examine infrastructure security controls and identify attack infiltration methods.
Mobile Application Penetration Test
Test Android and iOS apps with static, dynamic, and network analysis.
Wireless Network Penetration Test
Security assessment of wireless infrastructure, protocols, and authentication mechanisms.
IoT Penetration Test
Assess, analyse, and reverse-engineer smart devices for vulnerabilities.
Cloud Security Assessment
Test AWS, Azure, and GCP environments with configuration reviews.
PCI DSS Penetration Test
Based on NIST SP800-115, covering PCI DSS requirement 11 application, network, and segmentation testing, scoped and reported the way QSAs expect.
ASV Scan Support
Coordination and remediation support for the Approved Scanning Vendor scans PCI DSS requires, until the approved vendor's scan passes.
How we work
Every engagement runs through the same phases.
Preparation
We set the protocol with you: objectives, scope, and testing scenario (black-box, gray-box, or white-box), plus the rules of engagement: testing windows, escalation contacts, and safety limits for production.
You get a proposal with a fixed timeline and price.
Reconnaissance & information gathering
Active and passive discovery to map the attack surface: exposed services, leaked credentials, and the entry points an attacker would look for first.
A mapped attack surface
Exploitation & initial compromise
We validate exploitable vulnerabilities by safely gaining an initial foothold, confirming real impact.
Every reported issue is verified by hand.
Privilege elevation & lateral movement
From that foothold we escalate privileges and move laterally toward the agreed objective.
Shows how far a real attacker could reach
Reporting & retest
Findings are rated by severity (Critical, High, Medium, Low) with reproduction steps and remediation.
An executive summary for management, and a retest once your team has remediated
Pentest vs Red Team vs Purple Team
Penetration Test
- Objective
Find and validate as many vulnerabilities as possible in a defined scope
- Scope
Agreed list of applications, hosts, or networks
- Duration
Days to a few weeks
- Deliverable
Findings with severity, reproduction steps, and remediation guidance
- Who it's for
Teams that need assurance on specific systems, or compliance evidence
Red Team
- Objective
Test detection and response against a realistic, goal-driven attack
- Scope
The organisation: people, process, and technology
- Duration
Weeks to months
- Deliverable
Attack narrative, detection gaps, response timeline
- Who it's for
Organisations with a SOC that want to measure real readiness
Purple Team
- Objective
Improve detection by running attack techniques side by side with your defenders
- Scope
Selected techniques mapped to your monitoring coverage
- Duration
Workshop-style, days per iteration
- Deliverable
Tuned detection rules and a coverage matrix
- Who it's for
Blue teams that want to level up detection quickly
What you get
Executive summary
Business-level risk picture, suitable for management and auditors.
Findings with severity ratings
Each vulnerability scored with CVSS, so remediation can be prioritised objectively.
Reproduction steps
The exact steps to reproduce each finding, with requests, payloads, and screenshots.
Remediation guidance
Practical fixes.
Retest verification
Findings are re-checked after your fixes and the report is updated to reflect closed items, so you can show auditors and stakeholders that issues were actually fixed.
Every engagement to date has produced validated findings.
If a QSA or auditor is involved, the report is structured so it can be handed over as-is.
Team credentials
180+
clients served across finance, enterprise, and critical sectors
- OSCP
- OSCE
- CREST CRT
- CREST CPSA
- GIAC GREM
Testing is performed by our in-house team holding industry certifications including these, each earned through hands-on practical examination. The same team presents its research at international venues. See the full list of certifications the team holds.
Standards & compliance
NIST SP800-115
The Technical Guide to Information Security Testing and Assessment, which our methodology follows.
PTES and OSSTMM
The Penetration Testing Execution Standard and OSSTMM, which the methodology is aligned with.
PCI DSS, ISO/IEC 27001, OWASP
The compliance and testing requirements that apply to you, which the methodology is mapped to.
If your audit needs specific evidence formats, tell us during scoping.
Related services
Red teaming
A conventional pentest answers "what can be broken here?" A red team engagement answers "would we notice an attacker at all?"
Security hardening
A test ends at a list of findings, and for most organisations that is where the harder question starts: who fixes them. Security hardening is the engagement that closes those findings and brings the systems behind them to a baseline referenced to CIS Benchmarks, so the next test does not return the same configuration issues.
Last reviewed: 12 Oct 2026
PENETRATION TEST
Tell us the applications, hosts or networks in scope. We agree the scenario with you and send a proposal with a fixed timeline and price.
Frequently asked questions
What is penetration testing?
A penetration test is an authorised, simulated attack on your applications, infrastructure, or mobile platforms that finds and validates real vulnerabilities the way an actual attacker would. Unlike an automated scan, every finding is verified by hand, so every finding comes with proof of impact. Our methodology follows NIST SP800-115.
How is a penetration test different from a vulnerability assessment?
A vulnerability assessment enumerates and prioritises known weaknesses across a broad estate, usually through authenticated scanning with manual validation. A penetration test goes further: it exploits those weaknesses to prove which ones an attacker can actually chain together to reach sensitive data. An assessment tells you what could be wrong; a pentest proves what is.
Should I choose black-box or gray-box testing?
Black-box starts with no prior knowledge, simulating an external attacker who begins with only an IP range or URL. Gray-box grants some access up front (typically a standard user account) to simulate a malicious insider or an attacker who already has a foothold, and it reaches parts of a system black-box testing may never touch. Many clients scope both. We agree the scenario with you during scoping.
How long does a penetration test take, and how is it priced?
It depends on scope: the number of applications, hosts, or IP addresses in the engagement. A typical test runs from a few days to a few weeks. We agree the scope with you up front. You get a proposal with a fixed timeline and price.
From our testers
ARTICLES/6 Jul 2026
บริการ VA และ Pentest ตรวจช่องโหว่ก่อนผู้โจมตี พร้อมข้อกำหนดที่เกี่ยวข้อง
VA และ Pentest ช่วยให้องค์กรพบช่องโหว่ในระบบก่อนผู้โจมตี บริการทั้งสองแบบตอบกฎหมายและข้อกำหนดข้อไหน และเริ่มต้นกับ Incognito Lab อย่างไร
ARTICLES/7 Mar 2023
หา Path และ Endpoint จาก Wayback Machine ใน Black-box Pentest ที่เจอแต่หน้า Login
บทสนทนาระหว่าง senior pentester กับ rookie เมื่อทดสอบ web application แบบ black-box แล้วเจอแต่หน้า login ทางเลือกแบบ authenticated และ unauthenticated และการคุ้ย path จาก Wayback Machine ด้วย waybackurls
ARTICLES/27 Jan 2021
VA Scan คืออะไร ต่างจาก Pentest อย่างไร
เปรียบเทียบ VA Scan กับ Pentest ตั้งแต่วิธีทดสอบ ความถี่ที่มาตรฐานกำหนด ไปจนถึงการประเมินราคา รวม 11 คำถามที่องค์กรในประเทศไทยถามบ่อยที่สุดก่อนเริ่มโครงการ
Tell us what needs testing
We agree the scope and scenario with you, then send a proposal with a fixed timeline and price.
