External network
Your internet-facing estate as an attacker sees it: perimeter services, VPNs, remote access, mail and exposed admin panels.
From€1,450inc. VAT
Human-led penetration testing
Find the way in
before someone else does.
Scanners and AI tools find what they were built to find. Our certified testers find how an attacker would actually get in — across your networks, web applications and wireless — and keep testing as you change.
How an engagement runs
- 01Scoping callAgree targets, depth and testing windows. Free, 30 minutes.
- 02Fixed quote & authorisationSigned rules of engagement before any testing begins.
- 03Manual testingCritical issues reported to you the same day.
- 04Report & debriefExecutive summary plus technical findings, walked through on a call.
- 05RetestFixes verified and a retest letter issued.
Services
Four ways we test
Internal network
Assume-breach testing from inside: Active Directory, lateral movement, privilege escalation and segmentation.
From€2,900inc. VAT
Web application
Authenticated testing of apps and APIs to OWASP WSTG — access control, business logic, injection and session flaws.
From€2,400inc. VAT
Wireless
On-site assessment of corporate and guest Wi-Fi: encryption, rogue access points, client isolation and network separation.
From€1,450inc. VAT
Why manual, in an AI world
Automation finds the obvious.
People find the way in.
AI and automated tools are fast and good at breadth — we use them too. But real breaches rarely come from one obvious flaw. They come from broken authorisation, business-logic mistakes and small weaknesses chained together. Finding those needs a person who thinks like an attacker.
OWASP WSTGPTESNIST SP 800-115CVSS v4.0
Automated & AI toolsNetDefenders
Known CVEs & misconfigurations
Business logic & access-control flawsLimited
Chaining low-risk issues into compromiseLimited
False positives in the reportCommonEvery finding proven
Risk explained for your businessGenericTailored
Runs continuouslyWith our programmes
Continuous testing
A once-a-year test is a snapshot. Your attack surface changes every week.
Our continuous programmes give you the depth of a manual pentest at the cadence of a subscription: a person testing your estate every quarter, your perimeter reviewed every month, and every fix retested without another purchase order.
A year on a continuous programme
- Q1 Manual test
- Q2 Manual test
- Q3 Manual test
- Q4 Manual test + attestation
Monthly perimeter review Quarterly manual test Retests whenever you fix
What you receive
Every engagement includes
Executive summary
Risk in business terms, for boards and auditors.
Technical findings
CVSS-rated, with evidence and reproduction steps.
Remediation guidance
Prioritised, specific fixes — not generic advice.
Debrief call
Walk through results with the tester.
Retest & letter
One free retest within 30 days, plus attestation letter.
Supports evidence for
NIS2DORAISO/IEC 27001PCI DSS 4.0GDPR Art. 32
Transparent pricing
Know the cost before you call.
Published starting prices, a calculator for your exact scope, and continuous programmes from €590/month. All prices include 19% VAT. Your fixed quote is confirmed after a free scoping call.
External network
€1,450
up to 16 IPs · ~2 days
Internal network
€2,900
up to 250 hosts · ~4 days
Web application
€2,400
1 app, 2 roles · ~3 days
Wireless
€1,450
1 site, 3 SSIDs · ~2 days
About
Independent testing from Cyprus, for clients across Europe.
NetDefenders is a penetration testing brand operated by T.S Squire Assurance Ltd, a company registered in the Republic of Cyprus. We work remotely across the EU and UK, and on-site in Cyprus for internal and wireless engagements.
Every engagement is led and delivered by founder Thomas Squire, a senior penetration tester and former cyber security manager with more than ten years in security. Thomas has built and run a commercial penetration testing practice — including its automated, continuous testing service — led a CREST accreditation programme and mentored teams of consultants. He still does the hands-on testing himself.
He has tested organisations in financial services, healthcare, education and e-commerce across networks, Active Directory, web applications, APIs and wireless, regularly taking internal engagements through to full domain compromise.
How we work
The certified tester you speak to is the one who tests
Automation for breadth, people for depth
Methodology aligned to CREST, OWASP and NIST
NDA and signed rules of engagement as standard
Client data held encrypted, deleted on request (GDPR)
Professional indemnity insurance [confirm cover]
Certifications
Independently certified, hands-on
Practical, exam-based certifications: each one requires compromising live lab environments, not answering multiple-choice questions.
Offensive Security Experienced Penetration Tester
OffSec
Offensive Security Certified Professional
OffSec
Offensive Security Wireless Professional
OffSec
CREST Registered Penetration Tester
CREST
Certified Red Team Expert
Altered Security
Certified Red Team Professional
Altered Security
From real engagements
What manual testing finds that scanners miss
INTERNAL NETWORK
An "informational" printer
A printer rated informational by scanners was set up for scan-to-folder. Its stored service-account credentials led to domain user access.
INFRASTRUCTURE
A switch's hidden field
A hidden diagnostics field on a network switch revealed a password in cleartext. Password reuse turned it into full domain compromise.
WEB APPLICATION
Admin routes in the JavaScript
An app with little visible functionality referenced hidden admin endpoints in its client-side code. A standard user could call them.
Examples anonymised. Client details are never disclosed.
FAQ
Common questions
Why not just use an AI or automated pentest platform?
They are useful for breadth and frequency, and we use automation ourselves. But they struggle with business logic, authorisation and chaining small issues into real compromise — which is how most serious breaches happen. Our continuous programmes give you both: regular coverage plus a person testing what tools cannot.
Will testing disrupt our systems?
Testing is planned around agreed windows, and potentially disruptive techniques are only used with your explicit approval. Production-safe by default.
How soon can you start?
Typically within [X] working days of a signed quote and authorisation.
Do you need access to our network for internal tests?
Either on-site in Cyprus, or remotely via a small testing appliance or VM we ship and you connect.
One-off test or continuous programme?
A one-off test suits a release, an audit or a customer request. If you ship changes often or need ongoing NIS2, DORA or ISO 27001 evidence, a continuous programme is usually better value: regular manual testing, monthly perimeter review and unlimited retests for one monthly fee.
How do you invoice?
In euro, from T.S Squire Assurance Ltd. Published prices include Cyprus VAT at 19%; eligible EU businesses under the reverse charge are invoiced the ex-VAT amount. [Payment terms.]
Ready when you are