DELSTRIKE Security
We attack you before they do.
Offensive pentesting for e-commerce and SMEs. Authorised, documented and non-destructive.
What we do
We think like attackers. We work with your permission.
Real attacks
We exploit flaws in a controlled way to prove the impact, not just list them.
PTES method
Seven phases, written authorisation and clear rules before the first test.
Actionable report
Reproducible evidence, priorities and fix steps. Useful for GDPR, NIS2 and ISO 27001.
How we work
From first contact to re-test
Scope
A call to understand what you want to protect and choose the package.
Authorisation
Fixed proposal and signed rules of engagement. No signature, no testing.
Testing
We attack within agreed windows. If we find something critical, you hear from us the same day.
Report
Executive summary and technical detail with evidence, priorities and how to fix.
Re-test
We check that the fixes work and close the findings.
Services
Two ways to put you to the test
Common questions
Before we start
Can my store or network go down?
No. We never use denial-of-service attacks and we test within agreed windows. If anything puts the service at risk, we stop and let you know.
How long does it take?
It depends on scope: from a few days for an external assessment to a few weeks for a full one. The delivery date is fixed in the proposal.
Is a re-test included?
It's included in OPERATION (RAID) and TAKEDOWN (SIEGE). For other packages we assess it in the proposal.
Is it legal?
Yes. We only work with written authorisation from the system owner and within the signed scope.
What do you need from me?
A technical contact and the signed authorisation. Depending on the package, test accounts or a standard user.
What do I get at the end?
An executive report for management, a technical report with reproducible evidence and a session to walk you through it.
About
A small team, on purpose.
We are two professionals with backgrounds in systems, development and cybersecurity.
- Systems
- Development
- Offensive security
We know what we attack
We have run infrastructure and shipped code to production, so we know how the things we test are built and how they break.
No middlemen
We handle every project from start to finish. You always talk to the people doing the testing.
Legal backing
An external legal team reviews authorisations, contracts and data handling, so every test is as sound legally as it is technically.
Contact
Let's talk
Leave your company and email and we'll get in touch.