Offensive security that delivers concrete results
Every project starts with a conversation about risk and ends with a report your team will actually act on.
Penetration testing
We simulate a real attack on your systems. We test manually, chain vulnerabilities into attack paths and document every step.
What we test
- Web applications and APIs (REST, GraphQL)
- iOS and Android mobile apps
- External infrastructure and perimeter
- Internal network and Active Directory
- Wi-Fi networks
What you get
- Executive summary
- Findings with PoC and CVSS scores
- Step-by-step remediation guidance
- Results walkthrough meeting
- Retest and final report
Red teaming
A scenario from reconnaissance to objective, run without warning the defenders. We test detection, procedures and response time, not just systems.
Scope
- Reconnaissance and phishing
- Initial access and privilege escalation
- Lateral movement and Active Directory
- Agreed objectives (flags)
- Working with the blue team (purple)
What you get
- Step-by-step attack narrative
- Detection and response assessment
- Recommendations for the defenders
- Debrief workshop
Password audits
We test your organisation's passwords the way an attacker would after a hash leak — and show which policies work and which exist only on paper.
Scope
- Cracking Active Directory hashes
- Shared and reused passwords
- Presence in public breaches
- Compliance with the password policy
- Privileged and service accounts
What you get
- Statistics without revealing passwords
- List of accounts that need a change
- Password policy recommendations
- Material for staff training
Security audits
We check whether configurations, processes and code meet the requirements — technically and regulatory. No pile of documents, just a plan of action.
Scope
- System and service configuration review
- Security code review
- Gap analysis against NIS2 / DORA
- Architecture review and threat modelling
- Vendor security assessment
What you get
- Risk-rated report
- Compliance map against requirements
- Prioritised remediation plan
- Support during implementation
Infrastructure / cloud
Misconfiguration is the most common way into the cloud. We hunt for it in your accounts, clusters and pipelines — and help you close it for good.
Scope
- Cloud security review and IAM testing
- Microsoft 365 and Entra ID
- Kubernetes and container security
- IaC and CI/CD pipeline review
- Server, network and AD hardening
What you get
- Prioritised list of misconfigurations
- Ready-to-apply fixes (IaC / policies)
- Architecture recommendations
- Optional: implementation support
Consulting
We advise where a decision costs more than a test: when designing architecture, choosing vendors and meeting regulatory requirements.
Scope
- Architecture review of new systems
- Security requirements for vendors and tenders
- Support with regulatory implementations
- Security programme and policies
- Ad-hoc consulting for teams
What you get
- Architecture recommendations
- Ready requirements and checklists
- Participation in workshops and reviews
- Support in talks with the auditor
Training
We teach what we see in real projects. Workshops are run by practising pentesters, in labs that mirror real environments.
Programmes
- Security awareness for staff
- Web application and API security
- Networks, Windows and Active Directory
- Password cracking
- iOS and Android mobile apps
Format
- 4 to 16 hours of hands-on workshops
- Private groups for companies, on-site or online
- Materials and lab access
- Certificate of completion
CTF
From challenges and infrastructure to running it live. We organised what is probably Poland's largest on-site CTF — 2084 CTF (HackYeah 2025) and Reentry CTF (HackYeah 2026).
Scope
- Challenge design matched to the participants' level
- Platform and infrastructure (per-team instances)
- Live operation and participant support
- Training CTF for company teams
- Event CTF for conferences and hackathons
What you get
- A ready challenge set with solutions
- Platform and monitoring during the event
- Scoreboard and summary
- Learning material after the event
What ourclients say
The Unshade team are true professionals in their field. Thanks to their knowledge and commitment, we were able to significantly improve the security of our applications. We recommend their services to anyone who values quality and reliability.
Common questions
How much does a penetration test cost?
Pricing depends on the scope: the number of applications, endpoints and hosts, and the test variant (black, grey or white box). After a short call to agree the scope we prepare a quote with a concrete number of working days.
How long does a project take?
It depends on the scope. Testing a single application usually takes a few working days, larger environments a few weeks. Add time for the report, the consultation and a retest once the fixes are in.
What is the difference between black, grey and white box?
They differ in how much knowledge we start with: from none (an external attacker's perspective), through test accounts, to full access to documentation and code. Grey box usually gives the best coverage for the time.
Can testing disrupt our systems?
We agree testing windows, exclusions and a contact channel in case of problems. Tests run in a controlled way, and anything that could affect availability, such as load testing, is only done when agreed.
What does the report contain?
An executive summary, the methodology, the findings with CVSS risk ratings and references to CVE and the OWASP Top 10, and step-by-step remediation guidance — readable for both technical and non-technical audiences.
What happens after the report?
We walk your team through the findings, help implement the fixes, then retest and report which vulnerabilities were eliminated and which still need attention.
Let's talkabout your security
Leave your email and one sentence about what you need. We reply within one business day.
The form is being set up. Write to us directly: contact@unshade.pl