Offensive security with evidence behind it.
Exploit Security exists to break systems legally, safely and thoroughly so attackers do not get there first. Our work is grounded in manual testing, hardware expertise and published security research.
The Practise
Sydney-Based, hardware-led
We are a CREST-approved offensive security practice working from Sydney. Our testing is manual: researchers investigate, chain findings and demonstrate real impact rather than handing over automated scanner output.
Our centre of gravity is connected hardware. Firmware, bootloaders, debug interfaces, radios and update paths are where connected products quietly fail and where most testing stops short.
The same team publishes research, builds practice labs and releases tools. Curiosity drives our very fabric.
CREST
Approved offensive-security practice, providing an independent benchmark for technical assurance.
7
Published CVEs associated with the team’s security research and vulnerability disclosure work.
DEF CON
Victor Hanna presented “LED Light Lunacy: Hacking Smart Lighting Systems” at DEF CON 29.
1-4
Typical testing window in weeks, depending on scope, complexity and environment access.
Why clients choose us
01
Manual, attacker-led methodology
We investigate, chain findings and demonstrate real impact rather than relying on automated scanner output.
02
Hardware capability most firms lack
We assess physical devices, firmware, embedded interfaces, radios and the connected product ecosystem.
03
Research-backed credibility
Director Victor Hanna has presented at DEF CON 29 and the team’s published research includes seven CVEs.
04
Sydney-based delivery
Local presence supports physical testing, on-site work and direct collaboration with Australian clients.
Who we work with
Connected-device makers
Companies building IoT products, embedded systems, smart devices or hardware-dependent platforms.
Payment-handling businesses
Organisations that need PCI DSS testing and assurance across cardholder-data environments.
Scale-ups
Fast-growing companies that need senior offensive-security capability without hiring a full internal red team.
Regulated organisations
Businesses operating under compliance, assurance or governance obligations that require credible evidence of testing.