• About Us
  • Pentest
    Overview

    Our approach to pentesting

    Web Application

    Web apps, web servers & websites

    Mobile Application

    iOS, Android and other apps

    LLM & AI Application

    Red Team LLM & AI pentesting

    Cloud Security

    AWS, Azure and GCP testing

    Physical Penetration

    Onsite security assessment

    External Infrastructure

    Perimeter defence testing

    Internal Infrastructure

    Internal network & insider threats

    Social Engineering

    In-depth, highly-targeted phishing

    Phishing Simulation

    Phishing testing & awareness

  • Platform Features
  • Resources
    Resource Hubs
    Cloud Security Hub

    All you need to know about Cloud Security

    Penetration Testing Hub

    All you need to know about Penetration Testing

    Guides

    Topical whitepapers that dive into the current state of affairs

    Latest Articles

    banner image reads "what is a supply chain attack and how can I prevent them?" with a blue gradient background
    Banner image reads: "A Guide to External Attack Surface Discovery"
    See All Articles
  • Customers
    Testimonials

    What people are saying about the service at OnSecurity

    Case Studies

    From Engineering to Enterprise Security: How a Renowned Automotive Business Closed Critical Gaps with OnSecurity

    Secure and Streamlined: Why Countingup Chooses OnSecurity for Annual Testing

    Why Early-Stage Security Testing Builds Client Trust

    Driving Secure Growth Through Seamless Testing

    See All Case Studies
  • Events
  • Contact
Get Your Quote. Instantly.
  • Start Your Instant Quote
  • About Us
  • Pentest
    • Penetration Testing Services
    • Web Application Penetration Testing
    • Mobile Application Penetration Testing Services
    • Cloud Penetration Testing Services
    • Physical Penetration Testing
    • External Infrastructure Penetration Testing
    • Internal Infrastructure Penetration Testing
    • Social Engineering Penetration Testing
    • Phishing Penetration Testing Services
    • LLM & AI Red Teaming and Penetration Testing
  • Platform Features
    • External Vulnerability Scanning
    • Threat Intelligence & Web Scanning
  • Resources
    • Cloud Security Hub
    • Penetration Testing Hub
    • OnSecurity’s Latest Articles, News and Industry Tips
  • Customers
    • Case Studies: The Stories of Success
    • Testimonials of Cybersecurity Success
  • Events
  • Contact

The enquiry ordered into GCHQ’s Deal with US Amazon

Amazon Enquiry 1

“Online US retail giant Amazon has used its cloud operations to do a deal with the GCHQ, MI5, and MI6, The Financial Times reports.

Pentest Files: Error Messages And Cloud Access Keys

Cloud Access Keys

Welcome to our Pentest Files blog series. Each blog post will present an interesting or dangerous finding one of our testers has identified in an actual recent pen-test, so you […]

What Is The Most Damaging Virus Attack Is and Why?

Cyber Attack Malware Virus

Here you can discover the history and impact of MyDoom, the fastest spreading and most damaging computer virus to date, on OnSecurity’s informative blog post

3 Simple Steps to Zero-Day Threat Protection

Laptop Hacker Money Padlock

Learn 3 essential steps to enhance your cybersecurity posture, and effectively mitigate emerging zero-day vulnerabilities for comprehensive threat protection.

Cloud Hesitancy in Cyber – Why do people question it?

Banner Image Reads: &Quot;Cloud Hesitancy To Cyber: Why Do People Question It?&Quot; With Blue Gradient Background.

The myths surrounding cloud security hesitancy. Gain clarity on common misconceptions and make informed decisions about cloud-based security solutions.

Computer Hacker Gains Access to Florida City’s Water Supply

Computer Hackers

A computer hacker in the US was able to gain access to the water system of Oldsmar in Florida and successfully increased the amount of sodium hydroxide.

Is it true, do Macs get infected with malware more easily?

Macbook

Apple claims that its Mac computers are well protected by in-built antivirus features, and there is no need to worry about extra security – how true is this?

File upload tricks and checklist

File Upload

A compilation of tricks and checks for when a file upload is encountered in an offensive security test.

A guide to implementing gRPC services worldwide

Project Crobat

Unravel the simplicity of gRPC with Project Crobat. Learn to streamline development with gRPC and empower your projects. Dive into our blog for insights!

Method Confusion In Go SSTIs Lead To File Read And RCE

Method Confusion

Delve into OnSecurity’s research on Go’s server-side template injection vulnerabilities, revealing potential for file reads and RCE exploits. Read more now.

← previous
Next →
Connect with OnSecurity—your global cybersecurity partner. Reach out for incident response, threat intelligence, or strategic collaboration. We're here to secure your digital future.

The OnSecurity founders spent a collective 40 years as professional ethical hackers. This experience has given us a unique insight into the hacker mindset, and how the modern cyber-crime industry works. We use this experience to protect our customers from modern hackers.

Quick Links
  • Careers at OnSecurity
  • Log in
  • Careers at OnSecurity
  • Log in
Legal
  • Privacy Policy
  • Cookie Policy
  • Terms & Conditions
  • Privacy Policy
  • Cookie Policy
  • Terms & Conditions
Get In Touch
  • contact@onsecurity.io
Twitter Linkedin

© 2025 All rights reserved OnSecurity Technology Limited
Company registered in England and Wales. Registered number: 14184026 Registered office: 1 Victoria Street, Bristol, England, BS1 6AA. 

Manage Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}