Penetration testing and red teaming, since 2014
We test your applications, infrastructure and people the way a real adversary would, then give you a clear, prioritised plan to fix what actually matters. Manual testing by senior engineers, evidence for every finding, and a retest to prove the fix.
GET /api/v2/invoices/{id}ci.internal.acme.tld — exposed CI runnerPOST /auth/resetFrom a single web-application test to a full red team operation. Twelve services across testing, adversary simulation and research — all delivered by the same senior team, with the same reporting standard.
Manual testing of web, mobile, API, network and cloud targets that proves real, chained impact.
View serviceConfiguration review and hands-on exploitation across AWS, Azure and GCP — identity, data, workloads and the paths between them.
View serviceInternal and AD-focused testing that maps the real paths from a foothold to Domain Admin — and the choke points that cut them.
View serviceBroad, repeatable coverage of your estate with expert validation that removes the false positives.
View serviceThe independent penetration test your ISO 27001, SOC 2, PCI DSS, DORA or NIS2 programme requires — done to the standard your auditor expects.
View serviceGoal-based adversary simulation across people, process and technology that measures detection and response.
View serviceIntelligence-led, objective-based red teaming aligned to DORA and the TIBER-EU framework for financial-sector resilience.
View serviceCollaborative red-and-blue exercises that validate your detections against real techniques, mapped to MITRE ATT&CK.
View serviceRealistic phishing, vishing and pretexting campaigns that test your people and processes — to strengthen them, not to trick staff.
View serviceDark-web, leaked-credential and brand monitoring — plus phishing-kit analysis and takedown support.
View serviceSecure code review, threat modelling and architecture guidance, plus custom tooling for your stack.
View serviceDeep research into the products you build or depend on — finding unknown vulnerabilities and, where needed, developing proof-of-concept exploits.
View serviceOur own security software, Blackbar and Airward, plus custom tooling built for your team.
View serviceThe same four stages on every project, so you always know what is happening and what you will receive.
A call with a senior tester to agree objectives, targets, rules of engagement and a fixed timeline. You receive a written proposal.
Hands-on testing and safe exploitation. Critical issues are reported to you the same day, not held for the final report.
An executive summary for leadership and a technical report your engineers can work from, walked through in a live debrief.
Once you've fixed the issues, we test them again and issue a letter confirming what is closed.
Our engineers hold the industry's most demanding practical certifications. Each one is earned in a timed, hands-on exam against live targets, not a multiple-choice test.
OSCE³OffSec Certified Expert
OSWEOffSec Web Expert
OSEPOffSec Experienced Penetration Tester
OSEDOffSec Exploit Developer
OSCPOffSec Certified Professional
CRTOCertified Red Team Operator
CRTLCertified Red Team Lead
CRTECertified Red Team Expert
BSCPBurp Suite Certified Practitioner
CREST CRTCREST Registered Penetration TesterLong-standing clients, some with us since our first year. Names are withheld: we work under NDA by default.
PXL Security's team is very talented and committed, and strives to get the job done. Their penetration testing skills are top-notch, at both network and web application level. Their reporting and communication skills are very good too.
PXL Security provides professional IT security analysis and advice. The team demonstrates expertise and is thorough in its work. We have been impressed with their attention to detail and highly recommend their services.
We hired PXL Security to analyse our website for potential security threats. We got the top vulnerabilities listed, along with a way to mitigate them. This helped us reduce the chances of an attack.
PXL Security provides top-notch security services with a focus on making things right for their clients. I would highly recommend anyone looking for cyber consultants to give them a try.
PXL Security has helped us with a number of security activities and we have always been very pleased with the quality and delivery.
A finding is only useful if someone can fix it. Each one in our reports carries its severity, the affected component, reproducible evidence, the business impact in plain language, and a concrete fix. Leadership gets a short summary of risk; engineers get everything they need to close it.
Our reports are structured to support evidence requirements for ISO 27001, SOC 2, PCI DSS, DORA and NIS2, and we can map findings to the controls your auditor asks about.
PXL Security LTD is an independent offensive-security company headquartered in Sofia, Bulgaria. We have been on the market since 2014, helping start-ups, scale-ups and established enterprises understand their real exposure through manual, realistic testing.
In that time attack techniques, cloud platforms and regulation have changed many times. How we work has not: hands-on, honest about what testing can and can't prove, plain in our reporting, and committed until issues are verified fixed.
We also build our own security software: Blackbar for redacting report screenshots, and Airward for Wi-Fi monitoring.
Tools that grew out of our own engagements, now used by security teams and individuals.
macOS, Windows, Linux
Screenshot redaction for security reports. Local OCR and 27 detectors find credentials, tokens, hashes and internal hostnames, then Blackbar permanently overwrites the pixels instead of blurring them. Fully offline, no telemetry.
Visit getblackbar.com
macOS
A menu-bar app that inventories every device on your Wi-Fi and alerts you to unknown devices and rogue access points. The monitoring we do on engagements, packaged so anyone can run it. Fully local, no telemetry.
Visit airward.appThreats and regulation differ by industry. Our testers adapt the scope and the reporting to yours.
Payments, open banking APIs, DORA readiness.
Multi-tenant platforms, APIs, SOC 2 and ISO 27001.
Checkout flows, fraud paths, PCI DSS scope.
Patient data, connected devices and integrations.
NIS2 obligations and OT-adjacent networks.
Citizen-facing services and portals.
Policy and claims platforms, broker portals, partner APIs.
Customer portals, provisioning systems and core-adjacent networks.
Smart-metering platforms, billing systems, NIS2 obligations.
ERP and SAP landscapes, supply-chain portals, plant networks.
Wallets, anti-cheat bypasses, account takeover and payment abuse.
Exchanges, custody platforms, wallets and their supporting APIs.
Learning platforms, student data and campus networks.
Streaming platforms, content protection and subscriber data.
Client portals and document systems that hold confidential data.
Anything else? Email [email protected] and a tester will answer.
Most web application or API tests take one to two weeks of testing, depending on scope. Red team operations usually run for several weeks. You receive a clear timeline in the proposal.
Pricing is based on scope and effort and agreed in writing before testing starts. The remediation retest is always included.
Safety comes first. We agree rules of engagement, testing windows and emergency contacts up front, and avoid destructive techniques unless you explicitly authorise them. Staging environments are welcome.
Yes. Our reports are structured to support evidence for ISO 27001, SOC 2, PCI DSS, DORA and NIS2, and we can map findings to the specific controls in your audit.
Yes. PXL Security LTD is registered in Bulgaria (VAT BG203239331) and routinely works under client NDAs, DPAs and vendor-onboarding processes.
Yes. We're based in Sofia and work with clients across the EU and worldwide, remotely or on-site.
Send a short description of your environment and goals. A senior tester, not a salesperson, will reply with questions, a proposed approach and a quote.