About us

SECFORCE is a cybersecurity consultancy, specialized in offensive security assessments offering both Consulting and Testing Assurance services.

Certified Excellence

Crest
Crest-VA
Pen-Test
CBEST
TIBER
TIBER
TIBER

Security is one of the biggest priorities for organisations today.

The threats are real, constant and ever-changing. This is no time to compromise your security.

That is why some of the world’s leading organisations trust Secforce to test their systems, upgrade their security programmes and comply with their regulations.

We are a team of exceptional security consultants, with the knowledge and insight to identify vulnerabilities and help you secure your systems.

Our Testing Services

Penetration Testing

The key to an effective penetration test is not simply to identify weaknesses; it is critical to explore these weaknesses to understand the real threat risk for any organisation.

Learn more

Adversary Simulation

The real value of a Targeted Attack Simulation stems from its adoption of the ‘assume breach’ mindset. This makes it possible to assess the effectiveness of an organisation’s s…

Learn more

Our Consulting Services

Penetration Testing Maturity

Penetration Testing Maturity

A holistic review of your testing programme aimed to understand its effectiveness and provide the advice and approach to maximise your results and enhance your security posture.

Learn more
DORA Compliance

DORA Compliance

An end-to-end solution providing the necessary consulting capabilities, our proven track record of technical expertise and partnerships to cover all the DORA requirements.

Learn more

Discover our uncompromising commitment to quality

About us

Case Studies

Cybereason, last line of defence
See all cases
How Nedbank mitigates cyber attacks
See all cases

The Lab

April 22, 2024

CVE-2023-26465 - Breaking Through XSS Filters in Pega Platform

Take a look at how we managed to break through XSS filters using Markdown-nesting and user mentioning functionalities in Pega Platform

See more
June 6, 2023

Size matters! When capital letters introduce vulnerabilities

Microsoft Dynamics 365 Rich Text Editor XSS

See more
Jan. 19, 2023

AWS Cognito pitfalls: Default settings attackers love (and you should know about)

Diving into some common, but sometimes overlooked, AWS Cognito misconfigurations.

See more

The Blog

Sept. 17, 2024

Are You a DORA Critical ICT Third-Party Service Provider (CTPP)?

Breaking down the legalistic text within the Regulation (and supplementary documentation) to give you an easy-to-understand guide to whether an ICT third-party service provider is likely to be considered critical.

See more
Sept. 9, 2024

Pen Testing Versus Red Teaming Use Cases: We Asked the Experts

Different use cases for red teaming versus penetration testing, featuring our team's insights and advice about choosing between them.

See more
Sept. 3, 2024

Pen Test vs Vulnerability Scan: How to Tell the Difference and Why It Matters

This blog post goes deeper into why understanding the use cases for a pen test vs a vulnerability scan matters.

See more