Real engagements. Real findings. Verifiable outcomes. References available upon request.
Being a multi-engagement customer of Mark's penetration and red team services, I feel comfortable comparing his expertise to bigger firms I've engaged with. His methods of compromise are clever, finding glaring and well-hidden holes in our systems. The penetration test reports are detailed and provide clear explanations on how to resolve the issues that were found. He also goes above and beyond most penetration testers by explaining in detail with demonstrations on how certain methods worked in our systems. One of the best penetration testers I've had the pleasure of working with.
Mark conducted an internal penetration test that uncovered multiple high-severity findings our internal team had completely missed. What set him apart wasn't just the depth of the technical work — it was the way he communicated every finding. The final report was something I could walk into a board meeting with and actually use. He found privilege escalation paths through misconfigured service accounts we'd had in production for years. Clear methodology, exceptional documentation, and he stayed engaged through our remediation cycle. I wouldn't hesitate to bring him back for our next assessment.
We've engaged Mark across multiple assessment types and the quality has been consistent every time. On our most recent red team engagement, he demonstrated a full attack chain from initial phishing foothold to domain compromise — with detections bypassed at every stage. That's exactly the kind of adversarial pressure that tells you where your real gaps are. The debrief was thorough, the report was actionable, and Mark was available for follow-up questions through the entire remediation window. This is what a professional engagement looks like.