Kerberoasting Attack Explained: From a Normal AD User to Domain Admin
A Kerberoasting attack turns a single low-privilege domain account into cracked service credentials, and often into Domain Admin. Here is the full chain and the fixes that actually work.
Read more
From SSRF to Cloud Account Takeover: Attacking the Metadata Service
One SSRF bug in a URL fetcher can reach the cloud metadata endpoint, steal IAM role credentials, and end in full account takeover. Here is the chain, and how to break it.
Read more
Broken Object-Level Authorization (BOLA / IDOR): the API bug we find most
A BOLA vulnerability (also called IDOR) is the single bug we report most often on API tests. Here is how we hunt it by swapping object IDs across two accounts, and how to shut it down with server-side authorization.
Read more
What Does a Penetration Test Cost in 2026? (An Honest Breakdown)
A straight answer on penetration test cost in 2026: the real drivers behind the number, honest ranges, and the line items that quietly inflate a quote.
Read more
Cross-Site Scripting (XSS) in 2026: the web bug that refuses to die
Cross-site scripting has been a top web vulnerability for over twenty years and it is still one of the most common criticals we report. Here is how reflected, stored, and DOM XSS work, how we test for them, and the defenses that hold up.
Read more
Penetration Testing vs Vulnerability Scanning: What’s the Difference (and When You Need Each)
A scanner tells you a port is open and a version looks old. A pentester tells you how someone chains three "medium" findings into a full account takeover. Here is the real difference between penetration testing and vulnerability scanning, and how to know which one you actually need.
Read more
SOC 2 and Penetration Testing: What Auditors Actually Expect
A pentest is not a checkbox your auditor stamps and forgets. Here is what SOC 2 penetration testing actually needs to prove, how it maps to the Common Criteria, and the report details auditors ask for.
Read more
What an External Network Penetration Test Actually Finds
The big wins on external network penetration testing are rarely exotic zero-days. They are the forgotten box, the unpatched VPN, and the login that still says admin/admin. Here is what we find, and how.
Read more
How to Choose a Penetration Testing Company (2026 Buyer’s Guide)
Most pentest reports we get asked to review are automated scans in a nice PDF. Here is how to choose a penetration testing company that actually tests.
Read more
