Offensive security, put to work on compliance.
Penumbral Labs is a specialist practice, not a big consultancy. That is the point. You work directly with the person doing the testing, an offensive-security practitioner who finds and responsibly discloses real vulnerabilities in widely used open-source software.
We hold recognised offensive-security certifications: CPTS, CRTO, and CRTE. We maintain a record of credited vulnerability findings, including work under active coordinated disclosure.
A proprietary AI vulnerability scanner, built and running, that finds vulnerabilities across large codebases faster than manual review. It means a single specialist can deliver the depth a compliance engagement needs, at a price a small manufacturer can afford.
How we work
Fixed scope, fixed price, clear deliverables, no jargon in the reports your management has to read. We tell you what is wrong, how serious it is, and what to do about it.