Exfiltra Reviews (7), Pricing, Services & Verified Ratings

Offensive Security for Modern Attack Surfaces

Exfiltra is an offensive security firm specializing in modern cloud and identity attack surfaces. Registered in Estonia (EU) and operating globally, we work with high-growth technology teams who have outgrown automated scanners and need to understand how their environments would actually be breached.

Min project size
$5,000+
Hourly rate
$50 - $99 / hr
Employees
2 - 9
Year founded
Founded 2025
Languages

Service Lines

Cybersecurity: 100%

Select Focus Area

Cybersecurity focus

Application Security: 30%
Cloud Security: 30%
Vulnerability Management: 30%
Identity & Access Management: 10%

Industries

No Industries have been added yet…

Clients

No Clients have been added yet…

Cybersecurity Application Security Vulnerability Management

Pricing Snapshot

Min. project size $5,000+

Avg. hourly rate $50 - $99 /hr

Rating for cost 5 /5

What Clients Have Said

Exfiltra offers competitive pricing that aligns with client budgets, providing good value for cost. Projects typically involve 2–5 team members, with one client citing a $15,000 investment for comprehensive penetration testing services. Clients appreciate their timely delivery and effective communication.

This summary is based on verified Clutch reviews.

Most Common Project Size

$10,000 - $49,999 based on 1 review

< $10,000 $10,000 - $49,999 $50,000 - $199,999 > $200,000

Learn more about SEO pricing

Select a service to see pricing information

Exfiltra Review Insights

Overall Review Rating

4.9

Quality 5.0
Schedule 5.0
Cost 5.0
Willing to Refer 5.0

Top Mentions

Review Highlights

Caring and Attentive Service

Exfiltra was noted for their caring attitude and attentiveness to client needs, which helped build trust and ensured that projects were completed to the clients' satisfaction.
Strong Project Management Skills

Reviews consistently highlight Exfiltra's effective project management. They delivered on time, maintained clear and frequent communication, and ensured project milestones were met, contributing to successful engagements.
Positive Impact on Security Posture

Exfiltra's penetration testing services led to improved security scores and confidence in clients' security measures. Their detailed reports and recommendations were instrumental in addressing vulnerabilities.
Room for Improvement in Written Communication

While overall communication was praised, one client suggested that Exfiltra could expand their vocabulary in written updates to improve clarity and understanding during projects.
Alignment with Client Values

Exfiltra was chosen by several clients due to their alignment in company values and culture, which fostered strong partnerships and a collaborative working environment.
Professional and Ethical Conduct

Clients commended Exfiltra for their ethical, professional, and knowledgeable approach, which contributed to their reputation as a trusted and reliable partner in cybersecurity initiatives.

Was this helpful?

Exfiltra Reviews

Submit a Review

Verified

All Filters

0 selected

Sort by

Cybersecurity
Application Security Threat/Attack Simulations Vulnerability Management
Confidential
July - Sep. 2026

5.0

Quality: 5.0

Schedule: 5.0

Cost: 5.0

Willing to Refer: 5.0

"The collaboration between Exfiltra and our security staff was extremely effective."

Sep 4, 2026

SRE Infrastructure Manager, TUNE

Lars Rehe

Advertising & marketing
Seattle, Washington
51-200 Employees
Online Review
Verified

Exfiltra performed penetration testing on an affiliate marketing company's platform. The team tested the platform for security vulnerabilities based on a variety of industry-standard approaches and techniques.

Exfiltra found valid security vulnerabilities of various severities after performing thorough and comprehensive tests. The team's findings were accurate, well-documented, and presented in a way that made them easy to consume. Exfiltra established themselves as a trusted partner for the client.

BACKGROUND

Introduce your business and what you do there.

I’m the SRE infrastructure manager at Tune, an affiliate marketing platform that gives advertisers full control over their partnerships, data, and workflows. We enable brands to build and manage customized affiliate programs with reliable technology and support.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Exfiltra?

We hired Exfiltra to perform annual penetration testing of our platform to give us an outside perspective on the security posture of our customer-facing software systems.

SOLUTION

What was the scope of their involvement?

The objective of the engagement was to test the Tune platform for security vulnerabilities based on a variety of industry-standard approaches and techniques that test external and internal threat scenarios that resemble customers and affiliates interacting with the platform. Exfiltra provided a comprehensive and actionable report of findings. The report covered approach and methodologies, detailed documentation on the individual findings with recommendations for resolution and mitigation of risk.

What is the team composition?

We worked with 2–5 teammates from Exfiltra.

How did you come to work with Exfiltra?

We found them through a referral. We chose them because their pricing fit our budget, they had a great culture fit, they offered good value for the cost, and their company values aligned with ours.

What is the status of this engagement?

We worked together from July to September 2026.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Exfiltra found valid security vulnerabilities of various severities after performing thorough and comprehensive tests that were based on context and scenarios from business processes performed on the platform. The findings were accurate, well-documented, and presented in a way that made them easy to consume as input for remediation and mitigation efforts, increasing the effectiveness of our security efforts.

They discovered one critical vulnerability and multiple items of lower severity. The experience of this successful collaboration between our security staff and Exfiltra highlighted the value of ongoing collaboration with a strong external partner. Frequent communication, sharing context, and providing ongoing feedback improved the process and outcomes.

Although the project just finished and the long-term impact is yet to be seen, the report and the low number of findings immediately increased our confidence in our efforts. The learnings during the process from the collaboration will lead to changes in how we go about discovery and reconnaissance. Exfiltra has established themselves as a trusted partner we will continue working with, be that in recurring efforts similar to this one or in projects where they would take on a consulting role.

How did Exfiltra perform from a project management standpoint?

The project management was excellent. Timely and frequent communication via email and messages ensured continuous progress and efficiency and provided clarity of the process and transparency.

What did you find most impressive about them?

The collaboration between Exfiltra and our security staff was extremely effective. It was driven by mutual understanding and flexibility. They asked the right questions and suggested next steps during any phase of the effort (initial negotiation, planning, preparation, execution, and follow-up).

Are there any areas they could improve?

No, there was nothing I could come up with.

RATINGS

5.0

"Exfiltra has established themselves as a reliable and effective partner in our security efforts."

Cybersecurity
Application Security Threat/Attack Simulations Network Security Vulnerability Management
Confidential
Oct. 2024 - Ongoing

5.0

Quality: 5.0

Schedule: 5.0

Cost: 5.0

Willing to Refer: 5.0

"Exfiltra is ethical, professional, and knowledgeable."

Feb 5, 2026

Director, IT Company

Anonymous

Information technology
Manchester, England
11-50 Employees
Online Review
Verified

Exfiltra provides penetration testing and remediation services for an IT company. The team conducts tests covering networks, web apps, APIs, and mobile apps to strengthen cyber risk management.

Exfiltra has delivered timely milestones, maintained clear communication, and handled complex tasks professionally. Moreover, they've demonstrated flexibility, trustworthiness, and a strong focus on quality and ethical conduct throughout the ongoing engagement. Their caring attitude also stands out.

BACKGROUND

Introduce your business and what you do there.

I am the Director at an information technology company that provides affordable, continuous penetration testing and tailored cybersecurity solutions. We combine advanced automation with expert human insight to help organisations protect their people, data, and reputation.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Exfiltra?

We needed a trusted, highly competent, certified technical expert partner to handle a range of overflow cyber risk management services. The goal was to reduce our internal team workload, improve quality, and build resilience in our service delivery capabilities.

SOLUTION

What was the scope of their involvement?

Exfiltra provided penetration testing and related remediation services across networks, web apps, APIs, and mobile apps.

How did you find Exfiltra?

Research.

Why did you choose Exfiltra over other options you considered?

We selected Exfiltra because their company values aligned with ours.

What is the status of this engagement?

The project began in October 2024 and is ongoing.

How many teammates from Exfiltra were assigned to your project?

2-5 people from Exfiltra were assigned to the project.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

We saw timely completion of project milestones and meaningful communication throughout the process. Exfiltra demonstrated flexibility and a can-do attitude, handling complex tasks across penetration testing and related remediations professionally and according to the agreed scope. They often exceeded expectations and consistently displayed trustworthiness and a focus on doing the job right. While there were quantifiable improvements, I am unable to share specific metrics.

What was your primary form of communication with Exfiltra?

Email & Teams

How did Exfiltra perform from a project management standpoint?

Exfiltra is ethical, professional, and knowledgeable, and delivered on time.

What did you find most impressive about them?

The most impressive aspect was their caring attitude.

Are there any areas they could improve?

They could expand their vocabulary during written mid-project updates to improve clarity.

RATINGS

5.0

Cybersecurity
Application Security Cloud Security Cybersecurity Consulting Vulnerability Management
Confidential
Oct. 2026 - Ongoing

5.0

Quality: 5.0

Schedule: 5.0

Cost: 5.0

Willing to Refer: 5.0

"Exfiltra has delivered on time and executed the project perfectly."

Nov 3, 2026

Founder, SootheWorks

Taben Winter

Other industries
Fairfield, Iowa
1-10 Employees
Online Review

Exfiltra has conducted a white-box security architecture review for a wellness platform. The team has performed penetration testing for iOS, Android, and web platforms and assessed cloud security.

Exfiltra has delivered a letter showing that the client's app has been penetration tested. Moreover, they've provided comprehensive reports with quantitative results and metrics. The client has made specific improvements and changes based on Exfiltra's findings.

BACKGROUND

Introduce your business and what you do there.

I’m the founder of SootheWorks, a holistic practitioner marketplace that aims to make wellness accessible and equitable.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Exfiltra?

We needed help with a white-box security architecture review.

SOLUTION

What was the scope of their involvement?

Exfiltra has provided us with white-box penetration testing for iOS, Android, and web platforms. In addition, they've conducted a cloud security assessment. The team has delivered reports and recommendations based on their findings. Currently, I'm fixing the issues they've identified, and they'll retest once we've implemented the changes.

What is the team composition?

We've worked with 2–5 teammates from Exfiltra.

How did you come to work with Exfiltra?

We found Exfiltra through an online search and Upwork. We chose them because they had high ratings, offered good value for the cost, and had company values that aligned with ours.

What is the status of this engagement?

We started working with Exfiltra in October 2026, and our engagement is ongoing.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Exfiltra has provided us with a letter showing that our app has been penetration tested. In addition, they've delivered comprehensive reports with quantitative results and metrics, such as the number of vulnerabilities found and resolved. Moreover, we've made specific improvements and changes to our app and cloud environment based on Exfiltra's findings.

How did Exfiltra perform from a project management standpoint?

Exfiltra has delivered on time and executed the project perfectly. Although I've had several delays, they've worked with me every time. We communicate with Exfiltra through in-person meetings, virtual meetings, and emails or messaging apps.

What did you find most impressive about them?

I've had the opportunity to see Exfiltra's founder in person. He has excellent delivery and is an engaging speaker who asks questions of the audience and keeps people engaged. Getting the penetration testing report has been fantastic. The team has found all the important things I need to change. I'm grateful that I hired a skilled team to help test my app.

Are there any areas they could improve?

Exfiltra has been perfect; there's nothing they can improve on.

RATINGS

5.0

"More foudners need to take their cybersecurity seriously, and a team like ExFiltra is a great choice for a whitebox review of their product."

Cybersecurity
Threat/Attack Simulations Vulnerability Management
Confidential
Jan. - Mar. 2026

5.0

Quality: 5.0

Schedule: 5.0

Cost: 5.0

Willing to Refer: 5.0

“Everything has been perfect.”

Sep 24, 2026

Director of Product & Operations, Integral

Elie Kawkabani

Information technology
Beirut, Lebanon
51-200 Employees
Online Review
Verified

Exfiltra provided penetration testing services for an HR platform. The team conducted black box and gray box testing, provided a detailed report and certification, and helped address related issues.

Exfiltra solved many issues through real scenario testing, which was confirmed by the client. The team delivered on time and communicated through virtual meetings. Exfiltra's passion, professionalism, and expertise were hallmarks of their work.

BACKGROUND

Introduce your business and what you do there.

I’m the director of product and operations at Integral. We offer a user-friendly HR platform that automates time, attendance, payroll, and core HR tasks, empowering businesses to boost efficiency, employee satisfaction, and data security with scalable, integrated solutions.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Exfiltra?

We needed help with penetration testing.

SOLUTION

What was the scope of their involvement?

Exfiltra has done black box and gray box penetration testing. They’ve provided us with a detailed report and certification related to their tests. The team has also helped us address many issues related to penetration testing and security.

What is the team composition?

We’ve worked with 2–5 members of Exfiltra’s team.

How did you come to work with Exfiltra?

We found them through an online search. We chose them over other options because they had high ratings, their pricing fit our budget, they had a great culture fit, and their company values aligned with ours.

What is the status of this engagement?

We started working together in January-March 2026.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Exfiltra has done real scenario testing, and many issues have been solved. We’ve also retested the platform, and the tests have confirmed that some issues have been solved.

How did Exfiltra perform from a project management standpoint?

Exfiltra has delivered on time. We’ve communicated through virtual meetings.

What did you find most impressive about them?

Exfiltra is passionate about their work, professional, and expert.

Are there any areas they could improve?

No, everything has been perfect.

RATINGS

5.0

Cybersecurity
Application Security
Confidential
July 2026

4.5

Quality: 5.0

Schedule: 5.0

Cost: 5.0

Willing to Refer: 5.0

"Exfiltra's communication was impressive."

Aug 3, 2026

Director, Cybersecurity Firm

Anonymous

Information technology
London, England
1-10 Employees
Online Review
Verified

Exfiltra provided penetration testing for a cybersecurity firm. The team tested AI, mobile, and application security and provided reports, recommendations, and remediation plans.

Exfiltra's work helped the client reduce risk and show it to their end customers. The team excelled at project management services, delivered on time, and communicated effectively through virtual meetings. Overall, the engagement was successful.

BACKGROUND

Introduce your business and what you do there.

Ours is a cybersecurity, risk, and compliance firm that helps SaaS, tech, and AI companies implement frameworks like ISO 27001 and SOC 2 to reduce risk, achieve compliance, and build trust with enterprise customers.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Exfiltra?

We needed help with penetration testing.

SOLUTION

What was the scope of their involvement?

Exfiltra provided application, AI, and mobile testing. The team also provided reports, recommendations, and remediation plans.

What is the team composition?

We worked with 2–5 members of Exfiltra's team.

How did you come to work with Exfiltra?

We found Exfiltra through a referral. We chose them over other options because they had high ratings.

What is the status of this engagement?

We worked together in July 2026.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Exfiltra's work helped us reduce risk to show clients.

How did Exfiltra perform from a project management standpoint?

Exfiltra's project management was good, and they delivered on time. We primarily communicated via virtual meetings.

What did you find most impressive about them?

Exfiltra's communication was impressive.

Are there any areas they could improve?

There's nothing I can come up with.

RATINGS

4.5

Cybersecurity
Application Security Threat/Attack Simulations Cloud Security Vulnerability Management
Confidential
Aug. 2025 - Ongoing

5.0

Quality: 5.0

Schedule: 5.0

Cost: 5.0

Willing to Refer: 5.0

"Exfiltra has delivered on time and to tight deadlines."

Jun 15, 2026

CTO, Sports Management Platform Company

Anonymous

Sports
Australia
11-50 Employees
Online Review
Verified

Exfiltra has conducted penetration testing on a sports management platform company's web and mobile applications and cloud environment. The team has delivered a penetration testing report.

Exfiltra has completed penetration testing and remediation with no critical or major issues outstanding. The client has seen an improvement in their security scores. Exfiltra has delivered on time and to tight deadlines. Their clear deliverables have helped guide the client's remediation steps.

BACKGROUND

Introduce your business and what you do there.

I’m the CTO of a company that provides advanced, user-friendly sports management platforms across web and mobile, to different roles e.g. athletes and officials.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Exfiltra?

We needed help with penetration testing to find any security gaps and retest after fixing them.

SOLUTION

What was the scope of their involvement?

Exfiltra has performed penetration testing on our web and mobile applications and cloud environment. The team has delivered a penetration testing report.

What is the team composition?

We’ve worked with 2–5 teammates from Exfiltra.

How did you come to work with Exfiltra?

We found Exfiltra through an online search. We chose them over other options because they their approach indicated they could cover all aspects of the security testing we needed.

What is the status of this engagement?

We started working with Exfiltra in August 2025, and our engagement is ongoing for penetration testing after every major release.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Exfiltra has completed penetration testing and remediation with no critical or major issues outstanding. Our security scores have improved, and all critical and major issues have been remediated.

How did Exfiltra perform from a project management standpoint?

Exfiltra has delivered on time and to tight deadlines. We communicate via email and messaging apps.

What did you find most impressive about them?

Exfiltra’s clear deliverables have helped guide our remediation steps.

Are there any areas they could improve?

No.

RATINGS

5.0

Cybersecurity
Threat/Attack Simulations Vulnerability Management
$10,000 to $49,999
Dec. 2025 - Jan. 2026

5.0

Quality: 5.0

Schedule: 5.0

Cost: 5.0

Willing to Refer: 5.0

"Exfiltra had deep expertise in penetration testing."

Jan 27, 2026

Executive, Security Consultant OU

Anonymous

Other industries
Tallinn, Estonia
11-50 Employees
Online Review
Verified

Exfiltra provided penetration testing services for a cybersecurity consultancy. The team was responsible for conducting gray box testing on the client's customers' SaaS platforms and delivering an audit report.

Exfiltra's work helped the end clients identify vulnerabilities in the tested platforms, which they later remediated. The team demonstrated deep expertise in penetration testing during the engagement. Moreover, Exfiltra had seamless communication and delivered on time, on scope, and on budget.

BACKGROUND

Introduce your business and what you do there.

I’m an executive of Security Consultant OU, a cybersecurity, privacy, and compliance consultancy for scale-ups. We deliver consistently high-quality results through an integrated model of expert consulting, hands-on implementation, and AI-enhanced service delivery. We enable clients to strengthen their security posture.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Exfiltra?

We needed help with penetration testing of client systems.

SOLUTION

What was the scope of their involvement?

Exfiltra conducted gray box penetration testing on SaaS platforms and provided a penetration test audit report as the result.

What is the team composition?

We worked with 2–5 teammates from Exfiltra.

How did you come to work with Exfiltra?

Exfiltra invited us for a review. We chose them over other cybersecurity service providers because their pricing fit our budget, they had a great culture fit, they offered good value for the cost, and their company values aligned with ours.

How much have you invested with them?

We spent around $15,000.

What is the status of this engagement?

We worked together from December 2025–January 2026.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Exfiltra identified vulnerabilities in the tested platform, and the clients have successfully remediated them.

How did Exfiltra perform from a project management standpoint?

They had seamless communication and delivered on time, on scope, and on budget. We communicated via virtual meetings, emails, and messaging apps.

What did you find most impressive about them?

Exfiltra had deep expertise in penetration testing.

Are there any areas they could improve?

No, there weren’t any.

RATINGS

5.0

"Exfiltra provides excellent penetration testing, cloud and appsec consulting services!"

Showing 1-7 of 7 Reviews

Our Story

The team at Exfiltra has various industry recognized certifications i.e. Microsoft Cybersecurity Architect, Certified Ethical Hacker, Practical Network Penetration Tester, Certified Cloud Security Knowledge, Certification of Competence in Zero Trust, and the list goes on! We believe in delivering nothing but quality, therefore every individual at Exfiltra undergoes a rigorous vetting process before they’re hired. We make sure only the best talent works at Exfiltra!

Premier Verified means Clutch independently confirmed Exfiltra is a legally registered business,
has had its financial risk status checked (Creditsafe: Moderate Risk), and is backed by 6 verified client reviews averaging 4.9 stars.

Learn More

Verified Client Reviews: 6

Overall Review Rating: 4.9

Source: Clutch

Last Updated: November 3, 2026

Business Entity

Business Entity Name	Najam Saqib - Exfiltra
Source	Government of Pakistan - Federal Board of Revenue
Jurisdiction of Formation	Pakistan
Date of Formation	September 9, 2021
Status	Active
Last Updated	October 28, 2026
ID	3410126356675

Credit Report Results

International Credit Risk Assessment	Moderate Risk
Source	Creditsafe
Last Updated	November 8, 2026

Learn More About The Clutch Verification Process

Contact Exfiltra

If you’re not seeing exactly what you need here, send this company a custom message. You can talk about your project needs, price, and timeline to get started on your project.

Get connected to see updates from Exfiltra like new case studies, latest reviews, their latest masterpieces in their portfolio, delivered straight to you.

CHIP

(1)

Elie Kawkabani

Exfiltra

(1)

Najam Ul Saqib

SootheWorks

(1)

Taben Winter

TUNE

(1)

Lars R

Exfiltra

Offensive Security for Modern Attack Surfaces

3 Languages that we service

Services

Focus

Industries

Clients

Pricing Snapshot

What Clients Have Said

Most Common Project Size

Select a service to see pricing information

Reviews

Exfiltra Review Insights

Overall Review Rating

Top Mentions

Review Highlights

Caring and Attentive Service

Strong Project Management Skills

Positive Impact on Security Posture

Room for Improvement in Written Communication

Alignment with Client Values

Professional and Ethical Conduct

Reviews mentioning:

Exfiltra Reviews

Penetration Testing Services for Affiliate Marketing Company

BACKGROUND

OPPORTUNITY / CHALLENGE

SOLUTION

RESULTS & FEEDBACK

RATINGS

Cybersecurity for IT Company

BACKGROUND

OPPORTUNITY / CHALLENGE

SOLUTION

RESULTS & FEEDBACK

RATINGS

Cybersecurity for Wellness Platform

BACKGROUND

OPPORTUNITY / CHALLENGE

SOLUTION

RESULTS & FEEDBACK

RATINGS

Penetration Testing Services or HR Platform

BACKGROUND

OPPORTUNITY / CHALLENGE

SOLUTION

RESULTS & FEEDBACK

RATINGS

Penetration Testing Services for Cybersecurity Firm

BACKGROUND

OPPORTUNITY / CHALLENGE

SOLUTION

RESULTS & FEEDBACK

RATINGS

Cybersecurity Services for Sports Management Platform Co

BACKGROUND

OPPORTUNITY / CHALLENGE

SOLUTION

RESULTS & FEEDBACK

RATINGS

Penetration Testing for Cybersecurity Consultancy

BACKGROUND

OPPORTUNITY / CHALLENGE

SOLUTION

RESULTS & FEEDBACK

RATINGS

Portfolio & Awards

About the Team

Our Story

Verification

Business Entity

Credit Report Results

Contact

Connect with Exfiltra on Social

Connections

CHIP

Exfiltra

SootheWorks

TUNE