
Meet NailaoLocker: a ransomware distributed in Europe by ShadowPad and PlugX backdoors
18 February 2025
Penetration testing is a security assessment where vulnerabilities are found and exploited, safely, to see the impact a real attack could have.
Ethical hacking is not simply an aggregate of different types of assessments: it is the actions organisations take to pro-actively identify vulnerabilities in their security posture which would give rise to business risk.
When you need facts about the actual state of your security, our security assessments can help. Whether it’s understanding and emulating what a real threat actor could do in your environment, or a scientific and thorough enumeration of all potential vulnerabilities in an application or network – our SensePostTeam can help.
Our research-lead approach means that our teams are on the cutting edge of their field and can be evaluated by their public research contributions through papers, tooling, and conference presentations.
A critical part of our business is our hacking training facility, which we deliver via SensePost, the specialist pen-testing arm of Orange Cyberdefense.
Facts about the actual state of your security
Comprehensive and flexible approaches specific to your goals
A senior and experienced team available
Regular public research contributors
Cloud security assessment
View datasheetApplication assessment
View datasheetExternal infrastructure assessment
View datasheetInternal infrastructure assessment
View datasheetRed teaming assessment
View DatasheetMobile assessment
View datasheetSecurity consulting
View datasheet
A critical part of our business is our hacking training facility, which we deliver via SensePost, the specialist pen testing arm of Orange Cyberdefense.
Our hacking training courses have taught thousands of students about the art of offensive and defensive approaches. Understand how hackers think, the tools, tactics and techniques they use. Our course presents technical skills and basic concepts required to those desiring a foundation in the world of information security.
Our courses are developed from the work we perform for clients so that you get a better understanding of how to exploit real-world scenarios. As one of Black Hat briefings longstanding training partners, our courses have taught thousands of students about the art of offensive and defensive approaches.
Meet NailaoLocker: a ransomware distributed in Europe by ShadowPad and PlugX backdoors
18 February 2025
Black Hat USA 2025
Black Hat USA 2025
Black Hat USA is gearing up for an electrifying return to Las Vegas, NV, featuring a dynamic four-day program filled with immersive cybersecurity Trainings tailored for beginners and seasoned professionals alike.
Event detailsIn-Person
2nd of Aug
Mitigating Insider Threats Through Socio-Technical Systems Theory: A People, Process, and Technology Approach
13 February 2025
New Fortinet exploit CVE-2025-24472 disclosed
12 February 2025
Impact of the transition from the CVSSv3 to CVSSv4 norm
30 January 2025
CSIRT War Stories: the underestimated value of false positives
27 January 2025
External Attack Surface Management
Threat Intelligence
Security Navigator for Business Leaders
Managed Threat Intelligence