PXLSec, in plain terms.

What we are

PXLSecurity LTD. is an independent offensive-security company based in Sofia, Bulgaria, operating since 2014. We test systems the way an attacker would, then report what we found with the evidence and the fix. We are a small senior team; the people who scope an engagement are the people who run it.

What we do

• Penetration Testing — Manual testing of web, mobile, API, network and cloud targets that proves real, chained impact.
• Red Teaming — Goal-based adversary simulation across people, process and technology that measures detection and response.
• Vulnerability Assessment — Broad, repeatable coverage of your estate with expert validation that removes the false positives.
• Secure Development — Secure code review, threat modelling and architecture guidance, plus custom tooling for your stack.
• Security Toolkit — Our own security software, Blackbar and Airward, plus custom tooling built for your team.
• Cloud Penetration Testing — Configuration review and hands-on exploitation across AWS, Azure and GCP — identity, data, workloads and the paths between them.
• Active Directory & Internal Network — Internal and AD-focused testing that maps the real paths from a foothold to Domain Admin — and the choke points that cut them.
• Compliance-Driven Pen Testing — The independent penetration test your ISO 27001, SOC 2, PCI DSS, DORA or NIS2 programme calls for, done to the standard your auditor expects.
• Threat-Led Penetration Testing — Intelligence-led, objective-based red teaming aligned to DORA and the TIBER-EU framework for financial-sector resilience.
• Purple Teaming — Collaborative red-and-blue exercises that validate your detections against real techniques, mapped to MITRE ATT&CK.
• Social Engineering & Phishing — Realistic phishing, vishing and pretexting campaigns that test your people and processes — to strengthen them, not to trick staff.
• Vulnerability Research & Exploit Dev — Deep research into the products you build or depend on — finding unknown vulnerabilities and, where needed, developing proof-of-concept exploits.
• Threat Intelligence — Dark-web, leaked-credential and brand monitoring — plus phishing-kit analysis and takedown support.
• AI / LLM Penetration Testing — Testing for embedded AI and LLM features that starts with the administration plane — prompt configuration, model lifecycle, pipeline credentials and ingestion — not with jailbreak strings.
• Mobile Application Security — Manual testing of iOS, Android and cross-platform apps against the OWASP MASVS — the binary, the data on the device, the runtime and the API behind it.
• Desktop Application Penetration Testing — Manual testing of desktop clients, local data, privileged components, update mechanisms and the backend APIs they trust.
• Wi-Fi Penetration Testing — Hands-on testing of Wi-Fi authentication, client trust and network segmentation, with controlled proof of what wireless access can reach.

Requirements we are asked about most

• DORA & threat-led penetration testing
• NIS2 cybersecurity risk-management and security testing
• EU AI Act — Article 15 security testing
• PCI DSS penetration testing
• ISO/IEC 27001 penetration testing
• SOC 2 penetration testing
• Multi-framework penetration testing: one test, many audits

What we do not do, and do not claim

• We are not an auditor, assessor, certification body or regulator. We do not issue SOC 2 reports, ISO certificates or PCI attestations. We deliver testing and evidence; your auditor or assessor decides what they accept.
• We hold individual practitioner certifications. We do not claim any company-level accreditation.
• We do not publish client names. Our case studies and research are anonymised, and we work under NDA by default.
• We do not publish statistics we cannot source. The figures in our research report come from our own delivered engagements and the method is stated in the report.

Facts

Legal name	PXLSecurity LTD.
Founded	2014
Registered office	12 Vasil Levski Blvd., 1142 Sofia, Bulgaria
VAT	BG203239331
Contact	[email protected]
Working with	Clients across the EU and worldwide, remote or on-site

Where to look next

• A full sample penetration test report — the actual deliverable, 26 pages.
• A full sample AI / LLM penetration test report — 35 pages, nine findings.
• A full sample mobile application penetration test report — 30 pages, nine findings, mapped to the OWASP MASVS.
• Our findings research — aggregate data from our own engagements, free and ungated.
• Anonymised case studies — what we found and what changed.
• Published CVEs — our responsible-disclosure record.
• How we work and how we handle your data.