• About Us
  • Pentest
    Overview

    Our approach to pentesting

    Web Application

    Web apps, web servers & websites

    Mobile Application

    iOS, Android and other apps

    LLM & AI Application

    Red Team LLM & AI pentesting

    Cloud Security

    AWS, Azure and GCP testing

    Physical Penetration

    Onsite security assessment

    External Infrastructure

    Perimeter defence testing

    Internal Infrastructure

    Internal network & insider threats

    Social Engineering

    In-depth, highly-targeted phishing

    Phishing Simulation

    Phishing testing & awareness

  • Platform Features
  • Resources
    Resource Hubs
    Cloud Security Hub

    All you need to know about Cloud Security

    Penetration Testing Hub

    All you need to know about Penetration Testing

    Guides

    Topical whitepapers that dive into the current state of affairs

    Latest Articles

    Banner image reads: "The Security of SaaS: From risk to resilience in cloud environments" with a gradient blue background.
    Gradient blue banner image reads "How to Build Risk Assessments for Cybersecurity", with a clipboard icon in background.
    Banner image reads "ISO 42001: A compliance guide for businesses", with a blue gradient background and tick icon.
    Banner image reads "When Should I Cloud Penetration Test?" with blue gradient background and the cloud icon.
    See All Articles
  • Customers
    Testimonials

    What people are saying about the service at OnSecurity

    Case Studies

    From Engineering to Enterprise Security: How a Renowned Automotive Business Closed Critical Gaps with OnSecurity

    Secure and Streamlined: Why Countingup Chooses OnSecurity for Annual Testing

    Why Early-Stage Security Testing Builds Client Trust

    Driving Secure Growth Through Seamless Testing

    See All Case Studies
  • Events
  • Contact
Get Your Quote. Instantly.
  • Start Your Instant Quote
  • About Us
  • Pentest
    • Penetration Testing Services
    • Web Application Penetration Testing
    • Mobile Application Penetration Testing Services
    • Cloud Penetration Testing Services
    • Physical Penetration Testing
    • External Infrastructure Penetration Testing
    • Internal Infrastructure Penetration Testing
    • Social Engineering Penetration Testing
    • Phishing Penetration Testing Services
    • LLM & AI Red Teaming and Penetration Testing
  • Platform Features
    • External Vulnerability Scanning
    • Threat Intelligence & Web Scanning
  • Resources
    • Cloud Security Hub
    • Penetration Testing Hub
    • OnSecurity’s Latest Articles, News and Industry Tips
  • Customers
    • Case Studies: The Stories of Success
    • Testimonials of Cybersecurity Success
  • Events
  • Contact

The enquiry ordered into GCHQ’s Deal with US Amazon

Amazon Enquiry 1

“Online US retail giant Amazon has used its cloud operations to do a deal with the GCHQ, MI5, and MI6, The Financial Times reports.

Pentest Files: Error Messages And Cloud Access Keys

Cloud Access Keys

Welcome to our Pentest Files blog series. Each blog post will present an interesting or dangerous finding one of our testers has identified in an actual recent pen-test, so you […]

What Is The Most Damaging Virus Attack Is and Why?

Cyber Attack Malware Virus

Here you can discover the history and impact of MyDoom, the fastest spreading and most damaging computer virus to date, on OnSecurity’s informative blog post

What Was The First Ransomware Virus And Its Importants?

Ransomware Virus

One of the biggest growing problems in computer security is the growing proliferation of cyberattacks which are far more open and threatening in nature.

Who Does Social Engineering Target And Why That Target?

Who Does Social Engineering Target 1

Explore the rise of social engineering threats. Understand how individuals are manipulated to divulge sensitive information, passwords, and financial details.

A Ransomware investigation: A Short History of Ryuk?

Cover 11

Dive into the alarming rise of Ryuk ransomware since 2018, which has accumulated over $150 million, showcasing its global financial impact and danger.

TryHackMe X HackerOne CTF WriteUp (Hacker Of The Hill)

Hoth

This post explores each of the initial compromise methods for the TryHackMe x HackerOne CTF. Diving into the web security flaws and PHP tricks abused to gain access to the host webserver.

Method Confusion In Go SSTIs Lead To File Read And RCE

Method Confusion

Delve into OnSecurity’s research on Go’s server-side template injection vulnerabilities, revealing potential for file reads and RCE exploits. Read more now.

How A Love Letter Changed Computer Security Forever

I Love You Binary

Delve into the fascinating narrative of how a love letter altered the landscape of computer security perpetually. Uncover this tale of technological evolution.

Understaning Zero-Day Exploit And What Can I Do About It?

What Is A Zero Day

Explore the challenge of vulnerabilities exploited before fixes. Learn how to address security gaps and protect against threats in this insightful discussion.

← previous
Next →
Connect with OnSecurity—your global cybersecurity partner. Reach out for incident response, threat intelligence, or strategic collaboration. We're here to secure your digital future.

The OnSecurity founders spent a collective 40 years as professional ethical hackers. This experience has given us a unique insight into the hacker mindset, and how the modern cyber-crime industry works. We use this experience to protect our customers from modern hackers.

Quick Links
  • Careers at OnSecurity
  • Log in
  • Careers at OnSecurity
  • Log in
Legal
  • Privacy Policy
  • Cookie Policy
  • Terms & Conditions
  • Privacy Policy
  • Cookie Policy
  • Terms & Conditions
Get In Touch
  • contact@onsecurity.io
Twitter Linkedin

© 2026 All rights reserved OnSecurity Technology Limited
Company registered in England and Wales. Registered number: 14184026 Registered office: 1 Victoria Street, Bristol, England, BS1 6AA. 

  • Privacy Policy
  • Cookie Policy
  • Terms & Conditions
  • Privacy Policy
  • Cookie Policy
  • Terms & Conditions
Manage Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}