Punk Security

10/09/2025

Most pe*******on tests start the same way. The same tried and tested techniques, with a little creative flair.

We've prepared a brief guide to help you address these common issues before your next test... for free!

Here are 5 steps you can take right now to improve your cybersecurity, prepare for your next pentest, and make those pentesters work much harder.

22/08/2025

Good News EVERYONE! We've got a newsletter... well, actually we've got 2! Subscribe to get high-quality cyber and DevSecOps updates delivered directly to your mailbox.

No spam, just our take on what you should know from last month.

https://ck.punksecurity.co.uk/newsletters

10/01/2025

Ready to raise security awareness among your developers? Our DevSecOps training combines speaker-led content with engaging competitive labs.

https://punksecurity.co.uk/landing/devsecops

09/01/2025

Simon and Alex attended Blackhat Europe in December to present Secret Magpie, one of our opensource projects and a key component to our DevSecOps audits.

Check out the full slide deck in our blog.

https://punksecurity.co.uk/blog/blackhat_eu_2024/

08/01/2025

If you missed it before Christmas, SMBeagle has a shiny new feature! If you're not already using it on infra pentests, you're leaving some great privesc opportunities on the table

SMBeagle is our opensource SMB pentesting tool, but as a Christmas goodie we've added the number one requested feature. You can now automatically grab juicy ...

07/01/2025

We're JOSCAR registered, opening the door for a number of new opportunities this year and demonstrating our commitment to doing the right thing.

This sits proudly alongside our , , and accreditations.

https://punksecurity.co.uk/blog/punk_joscar/

06/01/2025

Looking for a better pentest this year? Want a registered provider that:

> Really understands cloud and modern tech
> Uses experienced developers to deliver web app pentests
> Provides a free retest and multiple debrief sessions

We love what we do, and so will you!

03/01/2025

To properly achieve "Continuous Pentesting" (of WebApps) and to engage developers in meaningful "Security Training", you need DevSecOps.

Want to learn more? Check out our free DevSecOps booklet.

https://punksecurity.co.uk/landing/devsecops

📕📙📒📗📘📓

02/01/2025

Looking for a quick New Year win to improve your cyber security? Scan your domain quickly and for free with dnsReaper. https://punksecurity.co.uk/dnsreaper

DNS NEVER gets reviewed, we just add new records on top. With the right conditions, attackers can hijack your domains.

💀

11/09/2024

dnsreaper, our opensource subdomain takeover tool with over 2k stars on Github and 11k users has had its biggest update yet. Our insanely fast async runtime (which powers the free testing tool at https://punksecurity.co.uk/dnsreaper) is now used in all our docker images.