Every system keeps time. We find the drift.
Greenwich Security Labs is a research-led team of offensive engineers. We test applications, cloud, identity and infrastructure the way capable adversaries do, and we stay until the gaps are closed.
Greenwich is where the world agreed what time it is. We bring the same discipline to security: one precise reference for how exposed you really are.
Eight disciplines. One standard.
Commission a single assessment or build a continuous programme. Each engagement is scoped to your risk, not to a template.
Vulnerability hunting with AI.
A practical, eight-hour workshop on applying AI tools and techniques to find security vulnerabilities. It is taught by the consultants who lead our penetration tests, using worked examples and lab environments built for the course.
Book it on its own, or add it to an engagement so your team keeps the method after we leave. We also build custom training around your stack.
A clear clock, from first call to proof of fix.
Scope
We agree targets, rules of engagement and timing on one call. You receive a fixed proposal before any work begins.
Operate
Senior engineers test by hand with our own tooling. Critical issues are raised the same day through a shared channel.
Report
An executive narrative plus technical findings with reproduction steps and fixes ranked by effort and risk.
Verify
We retest every fix and reissue the report, so you hold evidence of closure for auditors, customers and your board.
Findings written for the people who fix them.
Each issue carries its business impact, a reproducible proof, and a remediation your engineers can merge. No scanner noise, no padding.
Research we pursue.
The questions we work on between engagements. What we learn here ends up in your report and in our workshops.
Two senior consultants. No hand-offs.
International experience assessing applications, APIs and distributed services that handle very high traffic and terabyte-scale data.
Principal Security Engineer
Former penetration testing engineer at a major cloud provider, now leading offensive security and detection at a global trading platform across cloud, Kubernetes and identity. Has tested major Latin American banks and published research on low-level vulnerabilities, identity systems and container security.
Senior Penetration Tester
Leads security assessments of distributed services, APIs and cloud infrastructure at a major cloud provider, finding complex authorisation and business-logic flaws. Author or co-author of 39 CVEs.
Set your reference point.
Tell us what you need tested or taught. We reply within one business day with questions and a proposed scope.