INDEPENDENT. FOCUSED. NEW ZEALAND.
Identify weaknesses in the systems you rely on. Understand your exposure, prioritise what matters and move forward with practical remediation guidance.
Owner-delivered. Remote-first. Clear from the start.
Focused testing across the systems your business relies on.
See how an engagement works01 / OUR SERVICES
Testing shaped around your systems and your priorities. Each engagement turns technical findings into practical next steps.
Understand how your application behaves when its security controls are put to the test.
Assess agreed applications, APIs, roles and workflows, including authentication, access control, session handling and business logic. Scope reflects complexity and agreed access.
SUITED TO
Software teams and businesses running web applications.
YOUR OUTCOME
Prioritised findings and actionable guidance for your developers.
See your internet-facing systems from an attacker’s perspective.
Assess agreed public-facing systems and services for exploitable weaknesses and exposure. Manual investigation and validation go beyond an automated scan alone.
SUITED TO
Businesses and IT managers responsible for internet-facing infrastructure.
YOUR OUTCOME
A clearer picture of exposure, with practical steps to reduce risk.
Understand what could happen if an attacker gains a foothold inside.
Assess agreed internal systems, identity controls and potential attack paths. Remote testing may use client-approved access or a testing appliance; onsite needs are agreed during scoping.
SUITED TO
Organisations looking to assess the controls within their network.
YOUR OUTCOME
Evidence of potential attack paths and priorities for strengthening controls.
Every test is an assessment within an agreed scope and timeframe. It cannot identify every vulnerability or guarantee security.
02 / THE APPROACH
You should always know what is being tested, what happens next and what you will receive.
A remote scoping call to understand your business, systems, objectives and preferred timeframe.
A defined scope, fixed project quote and signed Statement of Work (SoW), so expectations are clear.
Confirm authorisation, Rules of Engagement, access, safeguards and readiness before work begins.
Testing against the agreed scope, with urgent findings communicated promptly to your nominated contact.
Secure report delivery and a findings debrief to help you understand the risks and plan remediation.
Retesting within the allowance and window agreed in the SoW, with an updated status for reviewed findings.
Agreed in writing. Before testing starts. The signed SoW defines scope, deliverables, responsibilities, confidentiality, testing permissions, fees and payment milestones. An enquiry or quote request does not authorise testing.
03 / WHAT YOU TAKE AWAY
A report should help people make decisions, whether they manage the business or maintain the systems.
Deliverables are agreed in your SoW and can include:
04 / ABOUT ANGLOSEC
Work directly with the consultant who does the testing.
AngloSec is an independent, owner-operated security consultancy serving businesses throughout New Zealand. You have a direct line to the person scoping your engagement, conducting the work and explaining the findings.
The focus is straightforward: clear scope, useful reporting and practical remediation. Delivery is remote-first, with onsite work by agreement.
Yes. AngloSec is remote-first. Web application, API and external infrastructure testing can usually be delivered remotely. Internal testing may use client-approved remote access or a testing appliance. Any onsite requirements are agreed during scoping.
The quote depends on scope, system complexity, agreed access and deliverables. A scoping conversation helps establish a fixed project quote, with fees and payment milestones set out in the SoW.
Testing carries risk. Techniques, testing windows, safeguards and stop conditions are agreed in advance, with a nominated client contact available during the engagement. Zero disruption cannot be promised.
Preparation typically includes agreed access, suitable test accounts, appropriate recovery arrangements and an available client contact. Readiness checks and any engagement-specific requirements are confirmed before testing begins.
The retest allowance, scope and window are agreed in your SoW. Retesting reviews the agreed findings after remediation and provides an updated status; it is not automatically a new assessment of the entire environment.
No. A penetration test assesses an agreed scope within a defined timeframe and with stated limitations. It cannot find every vulnerability or guarantee security or compliance. Findings help inform your wider security work.
LET’S UNDERSTAND YOUR SCOPE
Tell us a little about the service you need and your preferred timeframe. We can take the next step from there.
Email your enquiry [email protected]Opens your email app with an enquiry draft. Nothing is sent by this website.
