Our work

Case Studies

Real engagements, written up with the method and the limits included. Client details are omitted; the technical substance is not.

An Android examination where no spyware was found — but a single permission-audit timestamp placed an active screen mirroring session inside the…

An access controls audit that uncovered two unauthorised actors: one with admin privileges in Active Directory.

Migrating a growing business off legacy email and file systems: mailboxes, shared drives and calendars moved from a hybrid setup.

After unauthorised access to multiple user accounts, we traced the attacker's movements through logs, traffic and endpoint activity.

A full network audit for a client with unexplained performance problems: misconfigured servers, outdated software and open services.

A severe ransomware attack encrypted data across multiple endpoints and servers. We isolated the infection, identified the variant.