---
title: "Services"
url: "https://unshade.pl/en/services"
lang: "en"
---

# Services

Every project starts with a conversation about risk and ends with a report your team will actually act on.

## Services

- [Penetration testing](https://unshade.pl/en/services/penetration-testing.md) — A controlled attack on your applications, APIs and network — with proof of exploitation.
- [Red teaming](https://unshade.pl/en/services/red-teaming.md) — A simulated real-world attack — we test your systems and your team's readiness to respond.
- [Password audits](https://unshade.pl/en/services/password-audits.md) — Credential analysis: complexity, reuse and presence in breach databases.
- [Security audits](https://unshade.pl/en/services/security-audits.md) — A review of configuration and compliance — NIS2, DORA, ISO 27001 — with a remediation plan.
- [Infrastructure / cloud](https://unshade.pl/en/services/infrastructure-and-cloud.md) — AWS, Azure, GCP, Microsoft 365 and on-premise — from review to hardening.
- [Consulting](https://unshade.pl/en/services/consulting.md) — Support with implementations, regulatory requirements and security architecture.
- [Training](https://unshade.pl/en/services/training.md) — Hands-on workshops run by pentesters — for developers, admins and teams.
- [CTF](https://unshade.pl/en/services/ctf.md) — We design and run Capture The Flag competitions — for training and for events.

## What our clients say

> The Unshade team are true professionals in their field. Thanks to their knowledge and commitment, we were able to significantly improve the security of our applications. We recommend their services to anyone who values quality and reliability.
> — Donata Basińska, Vice President, WebTailor

> Unshade are experts you can rely on. Their knowledge, precision and dedication allowed us to ensure the highest level of security for our client's systems. I recommend their services to anyone looking for a solid partner in penetration testing.
> — Michał Mikołajczak, CEO, DataRabbit

> Unshade is a reliable and professional partner that conducted penetration tests and IT security workshops for us at the highest level. The team's expert knowledge and meticulousness resulted in a real strengthening of our systems' security. We fully recommend their services.
> — Piotr Goździejewski, Head of DevSecOps, e-file

> Working with Unshade guarantees professionalism and the highest standards. The team's flexibility, discretion and commitment were outstanding. I highly recommend Unshade as a reliable partner.
> — Marcin Marczewski, CEO, Resilia

> Unshade is a trusted partner in social engineering testing. Their knowledge and professionalism have helped us better protect our company's information security. The results exceeded our expectations, and the knowledge gained has become a key part of our security strategy.
> — Przemysław Pasek, CEO, Samba.ai

> The Cyber Awareness training delivered by Unshade was of the highest quality, both in content and organisation. Thanks to their expert knowledge and professional approach, our employees gained a deeper understanding of digital threats and how to protect against them.
> — Wojciech Kęsy, CEO, Farmapol

## Common questions

**How much does a penetration test cost?**

Pricing depends on the scope: the number of applications, endpoints and hosts, and the test variant (black, grey or white box). After a short call to agree the scope we prepare a quote with a concrete number of working days.

**How long does a project take?**

It depends on the scope. Testing a single application usually takes a few working days, larger environments a few weeks. Add time for the report, the consultation and a retest once the fixes are in.

**What is the difference between black, grey and white box?**

They differ in how much knowledge we start with: from none (an external attacker's perspective), through test accounts, to full access to documentation and code. Grey box usually gives the best coverage for the time.

**Can testing disrupt our systems?**

We agree testing windows, exclusions and a contact channel in case of problems. Tests run in a controlled way, and anything that could affect availability, such as load testing, is only done when agreed.

**What does the report contain?**

An executive summary, the methodology, the findings with CVSS risk ratings and references to CVE and the OWASP Top 10, and step-by-step remediation guidance — readable for both technical and non-technical audiences.

**What happens after the report?**

We walk your team through the findings, help implement the fixes, then retest and report which vulnerabilities were eliminated and which still need attention.