Who we are
Security testers who think like attackers and write like partners
RootCut is a team of offensive security specialists. We help organisations understand their real exposure by doing what attackers do, carefully and within agreed limits, and then explaining what we found in plain language.
Our mission
Security testing should change something. A long report full of scanner output does not. We focus on the issues that matter, prove them, and stay with you until they are fixed.
How we work with you
Every engagement starts with a scoping conversation and agreed rules of engagement. During testing you have a direct contact, and critical issues are reported immediately rather than at the end.
Certifications
Proven, hands-on expertise
Our testers hold practical, exam-based certifications: each one means hours of hacking real systems under time pressure, not a multiple-choice test.
-
OffSec Certified Professional
OffSec
-
OffSec Experienced Penetration Tester
OffSec
-
OffSec Web Expert
OffSec
-
OffSec Exploit Developer
OffSec
-
Certified Red Team Operator
Zero-Point Security
-
Certified Red Team Lead
Zero-Point Security
-
Burp Suite Certified Practitioner
PortSwigger
-
CREST Practitioner Security Analyst
CREST
- MalDev Malware Development Advanced - Vol.1 Sektor7
What we stand for
Our principles
Manual first
Tools give coverage; people find the issues that matter. Every finding is verified by a tester.
Clear reporting
Written for the people who fix things and for the people who decide, with no jargon for its own sake.
Confidential by design
Results stay in an access-controlled, MFA-protected portal, never in email attachments.
Always improving
Our methodologies follow current attacker techniques and industry standards such as PTES, OWASP and NIST.
Ready to see your organisation through an attacker's eyes?
Tell us what you want tested. Existing clients can request a new assessment in the portal; new clients can ask for access in a minute. We reply with a proposal and dates.