100% OFFENSIVE SECURITY

We don't study the threat.
We are the threat, working for you

We show you where an attacker could find a way in, so you can strengthen it first.
See how we think
Port of Rotterdam logo
Shuberg Philis logo
Nederlandse Spoorwegen logo
Mediahuis logo
logo-mendix
Frank Energie - Logo
Tonys Chocolonely - Logo
Zwanenberg Food Group - Logo

Trusted by 250+ organisations

Curiosity drives how we attack.

Curiosity has always been at the heart of how we work. We want to know what happens when you look beyond the obvious, question assumptions and push a system further than intended.

Our roots in Capture The Flags and the ethical hacking community still shape how we think and work. We experiment, challenge and explore because that’s how you discover what others miss.

We attack to find out where security actually breaks. Then we help you understand what caused those weaknesses and how to prevend them, to make the systems you depend on more resilient.

Speak to an expert

How do you know your security holds up?

Security can look solid on paper and still break under attack. The gaps are often where you least expect them.

Compliance says you’re covered

Compliance proves controls exist. It doesn't prove they hold up when someone actively tries to break them.

AI changes the attack surface

As AI becomes part of applications and business processes, new attack paths emerge faster than traditional security approaches can keep up.

Your application keeps changing

Every release changes the attack surface. Could an attacker find what your latest release introduced before you do?

You trust assumptions that have never been challenged

Attackers look for the gaps between what you assume is secure and what actually is.

We keep learning and
evolving how we attack

Offensive security is part of how we work, learn and think every day. Every pentest, Red Team engagement, advisory service and training adds to our experience and makes what we deliver stronger.

We are the threat

Our assessments start by asking how an attacker would approach the application. By challenging assumptions, functionality and configurations, we uncover risks that can be overlooked during development and compliance reviews.

Advise beyond the findings

Vulnerabilities become actionable when you understand what matters most. We put risks into context, explain their impact on your organization and help you prioritize what needs attention, so you can make informed decisions instead of simply closing security tickets.
Put us to the test
pentests each year
0 +
security professionals
0 +
CTF participants worldwide
0
years of experience
0 +

Specialist expertise within offensive security

Offensive security is the core of what we do, with specialist expertise in areas such as Mendix and AI security.

Red Teaming &
Offensive Security

For more than 10 years, we have been looking for ways into applications, infrastructure and cloud environments. That experience forms the foundation of our penetration tests, security assessments and Red Teaming. We also work with frameworks such as TIBER-NL, ART and ZORRO.
View all Services

Mendix Security

We help organisations build secure Mendix applications throughout the entire development lifecycle. Our expertise is built on hundreds of penetration tests and captured in The S-Unit Top 10. These insights are embedded in our assessments, training courses and Capture The Flag challenges.
More about Mendix

AI Security

AI introduces new attack vectors that traditional security testing doesn’t cover. We assess AI-powered applications for risks such as prompt injection, insecure model integrations, excessive permissions and other vulnerabilities unique to AI systems.
More about AI Security

Getest in de echte wereld

We werken voor organisaties waar security niet mag falen.

targenio

targenio koppelt AI-agents aan bedrijfskritische systemen en wilde weten of het groeiende platform bestand was tegen realistische aanvallen.

Het assessment testte het platform aan de hand van realistische aanvalsscenario’s en leverde het developmentteam duidelijke, toepasbare inzichten op. De resultaten gaven targenio een beter beeld van waar securityrisico’s binnen de SDLC ontstaan en hoe het eerder aanpakken daarvan kostbare aanpassingen in een later stadium kan voorkomen.

Bingy

Bingy werkt met gevoelige welzijnsdata en had onafhankelijk bewijs nodig dat het platform veilig was om aan klanteisen te voldoen en verdere groei te ondersteunen.

Binnen twee weken werd de pentest uitgevoerd en het rapport opgeleverd, waarbij werd bevestigd dat er geen grote kwetsbaarheden waren gevonden. De resultaten gaven Binqy onafhankelijke validatie van de security en hielpen om pentesten een terugkerend onderdeel van de securitystrategie te maken. Daarmee ondersteunt het zowel het vertrouwen van klanten als de weg naar ISO 27001-certificering.

Bingy

Binqy werkt met gevoelige welzijnsdata en had onafhankelijk bewijs nodig dat het platform veilig was om aan klanteisen te voldoen en verdere groei te ondersteunen.
Lees de klantcase

Lorem ipsum

Binqy werkt met gevoelige welzijnsdata en had onafhankelijk bewijs nodig dat het platform veilig was om aan klanteisen te voldoen en verdere groei te ondersteunen.
Lees de klantcase

Dolor sit amet

Binqy werkt met gevoelige welzijnsdata en had onafhankelijk bewijs nodig dat het platform veilig was om aan klanteisen te voldoen en verdere groei te ondersteunen.
Lees de klantcase

Active in your sector

Every sector faces different threats, regulations and operational risks. We understand the environments you operate in and what needs to be protected.

Finance

Financial services operate under strict requirements such as DORA, while remaining a high-value target for attackers. Security testing needs to demonstrate not only compliance, but whether critical systems can withstand real-world attacks.
More about Finance

Critical Infrastructure

When critical systems support essential operations, a security incident can quickly become a continuity issue. IT/OT convergence, interconnected environments and supply chains create attack paths that can extend far beyond a single system.
More about Infrastructure

Healthcare

Healthcare organisations need to protect highly sensitive patient data while keeping essential systems continuously available. Requirements such as Cbw, GDPR and NEN 7510 add another layer of that responsibility.
More about Healthcare

Software & SaaS

Fast development cycles make it challenging to keep security aligned with every release. Embedding security throughout the SDLC helps teams identify weaknesses earlier, including Mendix and other low-code environments.
More about Software & SaaS

Our partners

cerios-logo
tesorion-logo
bakertilly-logo
awareways-logo
cuccibu-logo
logo-fortra
logo-eye-cyber-security
logo-passguard
logo-mendix
“The S-Unit combines in-depth expertise with a pragmatic approach. They think along critically, communicate clearly and translate their findings into concrete improvements we can act on straight away. It’s a pleasant way of working that helps us strengthen our information security further. And just as important: thanks to them, I sleep a lot better”
Firas Daoud
TAF – CTO
“The S-Unit understood from the start what we wanted to achieve, even though the path to get there wasn’t entirely clear yet. They took us along in their approach, thought ahead and switched gears quickly when needed. We could trust that it would work out, without having to keep steering. It’s a really pleasant way of working together.”
Martijn Korevaar
Gemeente Rotterdam – IT Risk & Compliance Manager
“We didn’t want to be told that we’re vulnerable. We wanted to see how far a real attacker would get. Instead of a standard report, we got insight into exactly the risks that matter most to us.”
Anonymous
Manager Tech Security
“We received professional help with a pentest of a broad application landscape. Despite the many different functionalities in our landscape, the test was fast and thorough.”
Daan van der Ham
Lead techniek - PO-VO Raad

Ready to put your
security to the test?

Whether you have a specific challenge or just want a fresh perspective, we’re happy to explore it with you and see where an offensive approach can add value.
Schedule a call