What we learn today strengthens tomorrow's attacks

A vulnerability only becomes meaningful in the context of its environment. That's why we combine in-depth knowledge of applications, infrastructure and emerging technologies with an attacker's perspective. Discover how our offensive mindset, continuous learning and advisory expertise help strengthen your organisation's cyber resilience.

We are the threat

Attackers work towards a specific objective, such as gaining access to sensitive data or critical systems. We take the same approach: identifying potential entry points, combining vulnerabilities and adapting our methods based on what we discover.

Security frameworks and checklists are valuable tools for assessing whether an application meets security requirements. Our offensive approach answers a different question: how well can the application withstand real-world attacks?

This offensive mindset underpins everything we do. The research question determines our approach, from an in-depth application penetration test to a targeted attack scenario or a red team engagement that also tests detection and response capabilities.

What does this mean for your organisation?

Fewer false positives

Our ethical hackers investigate and, wherever possible, validate their findings. This means you spend less time on vulnerabilities that cannot be exploited in practice and can focus on the risks that truly matter.

Technical depth with context for decision-making

Our reports provide in-depth technical findings and clear guidance for remediation. We also translate the most significant risks and their potential impact on your organisation into an accessible management summary. This helps you discuss risks at management level, justify priorities and make informed security decisions.

A partner who advises, not just delivers

Our involvement doesn't end when we deliver a report. Our ethical hackers and security consultants explain their findings, answer questions and advise on appropriate next steps. Where needed, additional assessments or targeted training help strengthen both your organisation's security and internal expertise.

What an attack reveals

Finding vulnerabilities is only the beginning of our analysis. We investigate how an attacker could combine these weaknesses and which business processes and systems this could put at risk. Our ethical hackers and security consultants turn these insights into clear priorities and actionable advice, helping you make informed security decisions.

Scenario Based Pentesting

In scenario-based penetration testing, for example, we investigate whether an attacker can gain access to sensitive data or critical systems from an agreed starting position. We identify potential attack paths and examine how vulnerabilities could be combined to achieve a specific attack objective.

The S-Unit Top 10

We use the knowledge gained from our research to continuously improve our approach and share our expertise. Drawing on years of Mendix penetration testing, we developed The S-Unit Top 10 vulnerabilities. Through hands-on training, we also help developers prevent vulnerabilities earlier in the development lifecycle.

“The S-Unit combines in-depth expertise with a pragmatic approach. They think along critically, communicate clearly and translate their findings into concrete improvements we can act on straight away. It’s a pleasant way of working that helps us strengthen our information security further. And just as important: thanks to them, I sleep a lot better”

Firas Daoud

TAF – CTO

“The S-Unit understood from the start what we wanted to achieve, even though the path to get there wasn’t entirely clear yet. They took us along in their approach, thought ahead and switched gears quickly when needed. We could trust that it would work out, without having to keep steering. It’s a really pleasant way of working together.”

Martijn Korevaar

Gemeente Rotterdam – IT Risk & Compliance Manager

“We didn’t want to be told that we’re vulnerable. We wanted to see how far a real attacker would get. Instead of a standard report, we got insight into exactly the risks that matter most to us.”

Anonymous

Manager Tech Security

“We received professional help with a pentest of a broad application landscape. Despite the many different functionalities in our landscape, the test was fast and thorough.”

Daan van der Ham

Lead techniek - PO-VO Raad

Want to know how we'd approach your security challenges?

Whether you’re facing a specific challenge or want to look at your security from a different angle, we’ll think it through with you and explore where an offensive approach makes the difference.