Solutions
Same team. Your language.
A penetration test is a penetration test. What changes is what "critical" means to you, who has to sign off, and what happens on the day it goes wrong. These four pages are the services assembled for a specific buyer — with that buyer's threat model, procurement reality and proof requirements already accounted for.
- CCCS approved
- National Defence endorsed
- Canadian owned
How to read this
Services are what we do. Solutions are who it's for.
If you already know you need a red team, go straight to Services — eight capabilities, described plainly, no vertical dressing. That page is for people who speak the vocabulary.
If you'd rather start from who you are — a town of 9,000, a defence subcontractor, a mine with six remote sites, a board protecting its executives — start below. Same engineers, same evidence standard, different framing and different proof.
By sector
Three industries we know cold.
Water treatment, emergency dispatch, tax and permitting systems — often defended by one or two people. Built for public-sector procurement and public-sector budgets, starting with a no-cost two-week clarity scan.
Defence · Controlled goods Cleared work, defensible evidenceFor primes, subcontractors and the platforms they build — including embedded and uncrewed systems. Canadian owned, CCCS approved, and used to reports that have to survive a government reader.
Mining · Energy · Industrial The plant doesn't stop for a patch windowOT and IT converging across remote sites on satellite and LTE, vendor remote access nobody owns, and PLCs that will never be patched. Tested without taking production down to do it.
By person
Sometimes the asset is a human being.
The company buying cover for named executives and their families — exposure removed, impersonation taken down, travel and devices hardened. Bought by a board or a CISO, delivered to a person.
For the individual Protect MeThe same cover when you're buying it for yourself rather than through an employer. One named advisor, no procurement, no security team required on your end.
Not on this list
If your sector isn't here, that's deliberate.
We publish a sector page when we've done enough of the work to say something the generalists can't — the specific regulator, the specific failure, the specific number that makes a board move. Four pages is honest. Fourteen would be marketing.
Finance, healthcare, legal, SaaS and retail are all live work for us; they just route through Protect My Company instead of a page pretending to be written for you.
Not sure which one you are?
Tell us what you're responsible for and what keeps coming up in meetings. We'll point at the right starting place — including when the honest answer is "you don't need us yet".