Penetration Testing
Web application, mobile application, API, infrastructure, cloud, internal, and physical testing to identify exploitable weaknesses before attackers do.
Standards we work to
- Cyber Essentials certification
- CIS Benchmark alignment
- IPI professional standards
- Joint Code of Ethics
- Evidence-led reporting
Services
Security testing with useful outcomes
Engagements are scoped around real business risk, practical evidence, and reporting that technical teams can act on.
Managed Vulnerability Scanning
Scheduled vulnerability scanning, triage, reporting, and remediation tracking across external, internal, cloud, and authenticated assets.
Red Teaming
Objective-led attack simulation that tests detection, response, and resilience against realistic adversary behaviour, including authorised physical scenarios.
Purple Teaming
Collaborative exercises that pair offensive techniques with defensive tuning, knowledge transfer, and measurable improvement.
Governance and Compliance
Cyber Essentials certification, optional readiness, CIS alignment for endpoints, servers, cloud environments and tenants, and control evidence.
Approach
Structured, secure, and evidence-led
Scope
Define objectives, assets, constraints, rules of engagement, and success criteria.
Test
Execute controlled testing with agreed communication, escalation, and evidence handling.
Report
Deliver risk-ranked findings, business impact, proof, and pragmatic remediation advice.
Improve
Support remediation validation, workshops, and defensive uplift where required.
Secure enquiry
Tell us about your requirement
Submit the core scoping information securely. We will review the details and contact you to discuss requirements, scope, and next steps.
Contact
Discuss a security requirement
Use the enquiry form for scoped work, or contact Amethyst Cyber Group directly for general enquiries.