---
title: "Home"
url: "https://unshade.pl/en"
lang: "en"
---

# Home

Penetration testing, red teaming, audits, cloud and infrastructure protection, and training for IT teams. We show you what an attacker sees — and how to fix it.

## In numbers

- **15+** years of experience
- **120+** security projects
- **120+** training sessions delivered

## Eight areas. One goal: a smaller attack surface.

- [Penetration testing](https://unshade.pl/en/services/penetration-testing.md) — A controlled attack on your applications, APIs and network — with proof of exploitation.
- [Red teaming](https://unshade.pl/en/services/red-teaming.md) — A simulated real-world attack — we test your systems and your team's readiness to respond.
- [Password audits](https://unshade.pl/en/services/password-audits.md) — Credential analysis: complexity, reuse and presence in breach databases.
- [Security audits](https://unshade.pl/en/services/security-audits.md) — A review of configuration and compliance — NIS2, DORA, ISO 27001 — with a remediation plan.
- [Infrastructure / cloud](https://unshade.pl/en/services/infrastructure-and-cloud.md) — AWS, Azure, GCP, Microsoft 365 and on-premise — from review to hardening.
- [Consulting](https://unshade.pl/en/services/consulting.md) — Support with implementations, regulatory requirements and security architecture.
- [Training](https://unshade.pl/en/services/training.md) — Hands-on workshops run by pentesters — for developers, admins and teams.
- [CTF](https://unshade.pl/en/services/ctf.md) — We design and run Capture The Flag competitions — for training and for events.

## From analysis to retest

1. **Needs analysis and goal setting** We discuss requirements and define the test goals.
2. **Refining the engagement** Scope, environments and completion criteria.
3. **Project kick-off** Inaugural meeting: plan, schedule, roles.
4. **Scope and environment check** We verify the target environment is ready.
5. **Execution** Tests run transparently, with visibility into progress.
6. **Report with findings** Vulnerabilities, recommendations and CVSS risk ratings.
7. **Consultation** We walk through the report so the team can act on it.
8. **Retests** We verify that the fixes are effective.
9. **Feedback** What was eliminated and what still needs attention.

## Trusted and tested

e-file, datarabbit, Resilia, samba.ai, iFirma, webtailor, Pekao Bank Hipoteczny, Seco/Warwick, Farmapol, AGH, Politechnika Rzeszowska, Europejskie Centrum Zdrowia Otwock, Urząd Patentowy RP, WeNet

- **Client rating** — Average client rating on Clutch — an independent review platform for IT providers.
- **Teaching** — We run the postgraduate programme Pentester: cybersecurity specialist at WSB Merito University.
- **CTF organisers** — Probably Poland's largest on-site CTF competitions — 2084 CTF (2025) and Reentry CTF (2026).

## Certified team, proven methodologies

- OSCP — OffSec Certified Professional
- OSWP — OffSec Wireless Professional
- eJPT — eLearnSecurity Junior Penetration Tester
- eWPT — eLearnSecurity Web Application Penetration Tester
- eCPPT — eLearnSecurity Certified Professional Penetration Tester
- CPENT — Certified Penetration Testing Professional
- CAPE — HTB Certified Active Directory Pentesting Expert
- BSCP — Burp Suite Certified Practitioner
- CEH — Certified Ethical Hacker
- MCRTP — Microsoft Cloud Red Team Professional
- CySA+ — CompTIA Cybersecurity Analyst
- CISSP — Certified Information Systems Security Professional
- CISA — Certified Information Systems Auditor
- CRISC — Certified in Risk and Information Systems Control
- ISO 27001 LA — ISO/IEC 27001 Lead Auditor
- ISO 22301 LA — ISO 22301 Lead Auditor