• About Us
  • Pentest
    Overview

    Our approach to pentesting

    Web Application

    Web apps, web servers & websites

    Mobile Application

    iOS, Android and other apps

    LLM & AI Application

    Red Team LLM & AI pentesting

    Cloud Security

    AWS, Azure and GCP testing

    Physical Penetration

    Onsite security assessment

    External Infrastructure

    Perimeter defence testing

    Internal Infrastructure

    Internal network & insider threats

    Social Engineering

    In-depth, highly-targeted phishing

    Phishing Simulation

    Phishing testing & awareness

  • Platform Features
  • Resources
    Resource Hubs
    Cloud Security Hub

    All you need to know about Cloud Security

    Penetration Testing Hub

    All you need to know about Penetration Testing

    Guides

    Topical whitepapers that dive into the current state of affairs

    Latest Articles

    See All Articles
  • Customers
    Testimonials

    What people are saying about the service at OnSecurity

    Case Studies

    Your Next Offensive Security Partner: Managing a Complex, High-Volume Security Programme with OnSecurity

    How New Icon Turned Pentesting Into a Hands-Off, Client-Facing Advantage

    A Partnership Built to Grow With Us: Why Noveva Software Group Chose OnSecurity

    Efficient and Collaborative: How Origin Turned Pentesting From Admin Burden to Routine Confidence

    See All Case Studies
  • Events
  • Contact
Get Your Quote. Instantly.
  • Start Your Instant Quote
  • About Us
  • Pentest
    • Penetration Testing Services
    • Web Application Penetration Testing
    • Mobile Application Penetration Testing Services
    • Cloud Penetration Testing Services
    • Physical Penetration Testing
    • External Infrastructure Penetration Testing
    • Internal Infrastructure Penetration Testing
    • Social Engineering Penetration Testing
    • Phishing Penetration Testing Services
    • LLM & AI Red Teaming and Penetration Testing
  • Platform Features
    • External Vulnerability Scanning
    • Threat Intelligence & Web Scanning
  • Resources
    • Cloud Security Hub
    • Penetration Testing Hub
    • OnSecurity’s Latest Articles, News and Industry Tips
  • Customers
    • Case Studies: The Stories of Success
    • Testimonials of Cybersecurity Success
  • Events
  • Contact

3 Simple Steps to Zero-Day Threat Protection

Laptop Hacker Money Padlock

Learn 3 essential steps to enhance your cybersecurity posture, and effectively mitigate emerging zero-day vulnerabilities for comprehensive threat protection.

A Ransomware investigation: A Short History of Ryuk?

Cover 11

Dive into the alarming rise of Ryuk ransomware since 2018, which has accumulated over $150 million, showcasing its global financial impact and danger.

Cloud Hesitancy in Cyber – Why do people question it?

Banner Image Reads: &Quot;Cloud Hesitancy To Cyber: Why Do People Question It?&Quot; With Blue Gradient Background.

The myths surrounding cloud security hesitancy. Gain clarity on common misconceptions and make informed decisions about cloud-based security solutions.

Computer Hacker Gains Access to Florida City’s Water Supply

Computer Hackers

A computer hacker in the US was able to gain access to the water system of Oldsmar in Florida and successfully increased the amount of sodium hydroxide.

TryHackMe X HackerOne CTF WriteUp (Hacker Of The Hill)

Hoth

This post explores each of the initial compromise methods for the TryHackMe x HackerOne CTF. Diving into the web security flaws and PHP tricks abused to gain access to the host webserver.

Is it true, do Macs get infected with malware more easily?

Macbook

Apple claims that its Mac computers are well protected by in-built antivirus features, and there is no need to worry about extra security – how true is this?

File upload tricks and checklist

File Upload

A compilation of tricks and checks for when a file upload is encountered in an offensive security test.

A guide to implementing gRPC services worldwide

Project Crobat

Unravel the simplicity of gRPC with Project Crobat. Learn to streamline development with gRPC and empower your projects. Dive into our blog for insights!

Method Confusion In Go SSTIs Lead To File Read And RCE

Method Confusion

Delve into OnSecurity’s research on Go’s server-side template injection vulnerabilities, revealing potential for file reads and RCE exploits. Read more now.

How A Love Letter Changed Computer Security Forever

I Love You Binary

Delve into the fascinating narrative of how a love letter altered the landscape of computer security perpetually. Uncover this tale of technological evolution.

← previous
Next →
Connect with OnSecurity—your global cybersecurity partner. Reach out for incident response, threat intelligence, or strategic collaboration. We're here to secure your digital future.

The OnSecurity founders spent a collective 40 years as professional ethical hackers. This experience has given us a unique insight into the hacker mindset, and how the modern cyber-crime industry works. We use this experience to protect our customers from modern hackers.

Quick Links
  • Careers at OnSecurity
  • Log in
  • Careers at OnSecurity
  • Log in
Legal
  • Privacy Policy
  • Cookie Policy
  • Terms & Conditions
  • Responsible Vulnerability Disclosure Program
  • OnSecurity’s Trust Centre
  • Privacy Policy
  • Cookie Policy
  • Terms & Conditions
  • Responsible Vulnerability Disclosure Program
  • OnSecurity’s Trust Centre
Get In Touch
  • contact@onsecurity.io
Twitter Linkedin

© 2026 All rights reserved OnSecurity Technology Limited
Company registered in England and Wales. Registered number: 14184026 Registered office: 1 Victoria Street, Bristol, England, BS1 6AA. 

  • Privacy Policy
  • Cookie Policy
  • Terms & Conditions
  • Responsible Vulnerability Disclosure Program
  • OnSecurity’s Trust Centre
  • Privacy Policy
  • Cookie Policy
  • Terms & Conditions
  • Responsible Vulnerability Disclosure Program
  • OnSecurity’s Trust Centre
Manage Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}