B—OPSOFFSEC / EUSenior-led delivery
The people who scope the work are the same people who run it.
EU-based offensive security
Find the security gaps attackers can actually use
We test how exposure, identity, and control weaknesses chain together, then turn the results into fixes your team can act on.
00 / Operating model
What you get from the start
Human-ledEN · FR · NLBelgium based
EU-based team
Comfortable in multilingual, regulated, and security-sensitive environments across Europe.
Reporting you can use
Clear findings, impact, priorities, and a debrief your team can act on quickly.
Support after the debrief
We stay available to review fixes, retest, and help with the hard questions.
01
Services
Choose the engagement that fits the problem
Start with the question you actually need answered
02
Before you buy
Start with the questions buyers actually ask
01
Penetration testing vs red teaming
When the goal is vulnerability discovery, when the goal is detection and response, and what actually changes between the two.
Read field note↗︎02What drives the cost of a pentest in Belgium
Not a fake calculator. Just the scope choices, constraints, and deliverables that actually move a quote up or down.
Read field note↗︎03What a ransomware exercise should give you
A useful exercise should show what defenders saw, what slowed the attacker, and what needs to change after the debrief.
Read field note↗︎03 / Operating sequence
Our approach
Realistic testing, transparent collaboration
Discovery & Scoping
We start by understanding your environment, objectives and constraints. Together we define realistic goals, rules of engagement and what success should look like for your organisation.
Attack simulation
We execute the agreed tests using realistic techniques that reflect your threat profile. You stay informed at key moments without affecting the exercise or revealing the scenario to your defenders.
Analysis & Debrief
We map out the findings, the attack paths we followed and the underlying issues. In a joint debrief, we walk through every step in clear language and help you prioritise what matters most.
Support & Follow-up
After the engagement, we remain available to review fixes and provide practical guidance. If needed, we validate improvements through retesting or short workshops to ensure lasting progress.
B-OPS / EU-based offensive security
We break in, so you know exactly what would break.
Focused engagement / NIS2
NIS2 Attack-Path Review
The NIS2 Attack-Path Readiness Review quickly shows whether external exposure, identity, and business impact really connect in your environment.
NIS2 review↗︎04
Field note
Research from the field.
Technical findings, attack paths, and practical guidance from active offensive security work.
Blockchain dead drops: how attackers store C2 on public chains
Attackers use public blockchains to help malware find its next server. How the reported campaigns work and what defenders can check in their own environment.
Read field note↗︎
Passkey-themed phishing in Microsoft 365: what to test
Attackers use passkey setup as a pretext to take over Microsoft 365 accounts. What to test in Entra ID, help desk processes and incident response.
Read field note↗︎
Speed is not stealth: what faster attacks mean for security testing
What to ask of your next security assessment when attackers move faster and use stolen AI credentials.
Read field note↗︎05
Questions before scope
Questions before scope
What's the difference between a pentest and a red team?+
A penetration test focuses on identifying and validating vulnerabilities. A red team exercise simulates a real attacker to test detection, response and overall resilience.
How long does a penetration test take?+
Most penetration testing engagements run one to three weeks depending on scope, environment size and required reporting.
Will a red team exercise disrupt normal business operations?+
Our red team exercises are designed to be safe and controlled. We coordinate all critical steps so there's no operational impact.
How do I prepare for a security test?+
We guide you through scoping, access, communication and expectations so the engagement runs smoothly from the start. Learn more about our security assessment services or red team exercises.