Secragon combines offensive security expertise with defensive engineering and practical risk management. We help businesses understand how their systems can be compromised, what the impact would be, and which improvements matter most.
Our work spans applications, infrastructure, cloud environments, and identities. We investigate how individual weaknesses connect into attack paths, examining the consequences for your systems, data, and business operations.
We combine established methodologies with hands-on investigation. When an engagement demands more than standard tooling, we adapt our techniques and develop custom tools and exploits to explore complex scenarios. Findings are validated and translated into clear reporting, risk priorities, and actionable remediation guidance.
As a boutique provider, we work directly with your technical teams and business stakeholders—from agreeing on objectives and scope to explaining findings and validating fixes. Our offensive experience also informs how we build detections and evaluate defensive controls.
Our team holds OSCP, OSWP, OSEP, OSED, OSWE, CRTO, and CRTO2 certifications. We draw on OWASP, MITRE ATT&CK, NIST, and PTES according to each engagement’s objectives.
Offensive Security
Web, API, mobile, infrastructure, cloud, and AD/Entra ID penetration testing
Red and purple teaming
Vulnerability assessments
Phishing and social engineering simulations
Password security audits
Defensive Security
SIEM/EDR/XDR implementation and monitoring
Detection engineering and security validation
Vulnerability and patch management
Zero Trust implementation
Digital forensics
Governance, Risk & Compliance
Cybersecurity risk assessments
Third-party risk management
Compliance and audit readiness: GDPR, NIS2, and DORA
Advisory & Training
Cybersecurity consulting
Security awareness training
Discuss your security objectives with Secragon. We will help define the right scope and the results your organization needs.
Secragon offers competitive pricing and good value for cost, with clients noting that their pricing fits within budget. They deliver comprehensive penetration testing services on time, ensuring effective communication and project management throughout engagements.
Clients express high satisfaction with Secragon's services, noting their responsiveness, professionalism, and the value provided for cost. Their efforts lead to improved security postures and successful project outcomes.
High Technical Expertise
Secragon is recognized for their deep technical knowledge and creativity in penetration testing. They stay updated with the latest attack vectors and demonstrate capability in handling modern threats, impressing clients with their expertise.
No Reported Areas for Improvement
In two of the reviews, clients did not identify any areas for improvement, indicating overall satisfaction with Secragon's performance and deliverables.
Marketing and Visibility Challenges
While Secragon is praised for their services, one client noted that as a boutique service provider, they could improve their marketing efforts to increase visibility and make their professional services easier to find.
Proficient in Penetration Testing
Secragon consistently delivers comprehensive penetration testing services across various digital platforms, identifying vulnerabilities and providing actionable remediation guidance. Their expertise spans mobile applications, web portals, and backend APIs.
Strong Project Management and Communication
Clients praise Secragon for their effective project management skills, timely deliverables, and clear communication. They maintain proactive support and adapt to changing requirements, ensuring smooth project execution.
“Their deep technical knowledge was evident throughout the engagement.”
Feb 4, 2026
Chief Digital & Infrastructure Officer, M2M Services Ltd.
Dimitar Georgiev
Verified
Other industries
Sofia, Bulgaria
201-500 Employees
Online Review
Verified
Secragon conducted coordinated penetration testing of a mobile app (iOS and Android), a production web portal, and associated backend APIs for a technology company. The goal was to provide remediation guidance.
Secragon delivered validated proof-of-concept evidence for all findings, enabling a measurable reduction in unauthorized access and backend exposure. The team completed all deliverables on schedule and maintained clear, proactive communication throughout the engagement.
The client submitted this review online.
BACKGROUND
Please describe your company and position.
I am the Chief Digital & Infrastructure Officer of M2M Services Ltd.
Describe what your company does in a single sentence.
Accelerating the mass adoption of smart security through universal and affordable IoT solutions We create simple, innovative and dependable technology that helps alarm companies bring smart security to every household and business around the world. M2M Services is a technology company that provides universal communicators, connectivity, and interactive services to a global network of thousands of professional alarm companies.
OPPORTUNITY / CHALLENGE
What specific goals or objectives did you hire Secragon to accomplish?
Conduct coordinated penetration testing of a mobile application (iOS and Android), a production web portal, and associated backend APIs. The objective was to identify vulnerabilities affecting authentication, authorization, and data handling, and provide remediation guidance to reduce exposure.
SOLUTION
How did you find Secragon?
Referral
Why did you select Secragon over others?
Pricing fit our budget
Great culture fit
Good value for cost
Referred to me
Describe the scope of work in detail. Please include a summary of key deliverables.
Comprehensive Web Application and Mobile Appliation PenetrationTest of the M2M Services.
This engagement simulates real-world cyberattacks in a controlled setting to proactively identify risks, safeguard your data, ensure business continuity, and maintain regulatory compliance.
Testing activities and reporting are aligned with industry-recognized frameworks, including but not limited to OWASP Top 10 (Web Applications), OWASP API Security Top 10, and MITRE ATT&CK techniques.
The approach combines scanning for common vulnerabilities with extensive manual testing using a blend of public tools and proprietary tools and exploits to uncover complex, business-logic, and context-dependent vulnerabilities and attack paths.
RESULTS & FEEDBACK
What were the measurable outcomes from the project that demonstrate progress or success?
Delivered validated proof-of-concept evidence for all findings, along with risk prioritization and remediation guidance, enabling measurable reduction in unauthorized access and backend exposure.
Describe their project management. Did they deliver items on time? How did they respond to your needs?
We were very satisfied with their project management. All deliverables were completed on schedule, and the team maintained clear, proactive communication throughout the engagement. They were highly responsive to our needs, quickly addressing questions and adapting to requirements as they arose, which made the entire process smooth and efficient.
What was your primary form of communication with Secragon?
Virtual Meeting
Email or Messaging App
What did you find most impressive or unique about this company?
The most impressive aspect of the company was their high level of expertise combined with exceptional responsiveness. Their deep technical knowledge was evident throughout the engagement, and they were always quick to respond, clarify findings, and provide practical guidance.
Are there any areas for improvement or something Secragon could have done differently?
"They provided proactive support throughout the project."
Nov 14, 2025
Security Engineer, Redpanda Data, Inc
Deso Dyakov
Verified
Information technology
San Diego, California
51-200 Employees
Online Review
Verified
Secragon was hired by a data streaming firm to conduct penetration testing on their serverless and connect environments. The team provided a report on the client's security posture and a risk mitigation plan.
Secragon's work helped the client improve their security policies and controls. The team delivered on time and within budget, and their proactive support and clear communication impressed the client. Their reporting was also concise and straightforward.
The client submitted this review online.
BACKGROUND
Please describe your company and position.
I am the Security Engineer of Redpanda Data, Inc.
Describe what your company does in a single sentence.
Agentic Dataplane and Streaming
OPPORTUNITY / CHALLENGE
What specific goals or objectives did you hire Secragon to accomplish?
To identify, exploit, and assess vulnerabilities in Redpanda’s Serverless and Connect environments, focusing on tenant isolation, Kubernetes security, and authorization mechanisms, and to provide actionable remediation guidance with a verified retest.
SOLUTION
How did you find Secragon?
Referral
Why did you select Secragon over others?
High ratings
Pricing fit our budget
Great culture fit
Good value for cost
Referred to me
Company values aligned
How many teammates from Secragon were assigned to this project?
2-5 Employees
Describe the scope of work in detail. Please include a summary of key deliverables.
We were delivered a complete Pentesting report, followed by Retest report and Attestation Letter to be used for compliance purposes.
RESULTS & FEEDBACK
What were the measurable outcomes from the project that demonstrate progress or success?
The engagement provided Redpanda with a verified understanding of its external and semi-internal security posture, helping the company significantly strengthen controls across its managed and serverless data streaming environments.
Comprehensive risk mitigation plan integrated into Redpanda’s DevSecOps pipeline
Improved tenant isolation, Kubernetes security policies, and cross-cluster segmentation controls
Zero service disruptions during the test period
Engagement completed on time and within the agreed budget
Describe their project management. Did they deliver items on time? How did they respond to your needs?
Project deliverables were delivered on time, and they provided proactive support throughout the project.
What was your primary form of communication with Secragon?
Virtual Meeting
Email or Messaging App
What did you find most impressive or unique about this company?
Communication was done in a proffesional manner.
All proposed remediations were accepted by our technical team.
Clear and to-the-point reporting.
Are there any areas for improvement or something Secragon could have done differently?
Improve the marketing - its a boutique service provider and hard to find such proffesional services.
RATINGS
5.0
Quality
5.0
Service & Deliverables
Schedule
5.0
On time / deadlines
Cost
5.0
Value / within estimates
Willing to Refer
5.0
NPS
Penetration Testing for Education Platform Company
"They stayed up to date with the latest attack vectors, including prompt poisoning and other modern threats."
Oct 27, 2025
COO, Electives, Inc.
Krikor Dzeronian
Verified
Information technology
Boston, Massachusetts
11-50 Employees
Online Review
Verified
Secragon provided cybersecurity and testing services for a learning platform company. The team was responsible for conducting manual penetration testing for the client's primary web app.
Secragon's efforts identified vulnerabilities in the client's platform and provided comprehensive reports and remediation guidance. The team provided timely deliverables, managed the project excellently, and communicated effectively. Secragon's creativity and expertise were commendable.
BACKGROUND
Introduce your business and what you do there.
I'm the COO at Electives, Inc. We are a learning platform that offers live, expert-led training and AI simulations for employees. Our platform covers topics such as leadership, business skills, and wellbeing, aiming to make learning engaging for staff and easy for HR to manage.
OPPORTUNITY / CHALLENGE
What challenge were you trying to address with Secragon?
We needed to ensure the security of our main web application, which is central to our business. To address this, we sought a partner to conduct a thorough manual penetration test and provide actionable recommendations for remediation.
SOLUTION
What was the scope of their involvement?
Secragon performed a manual penetration test focused on our web application. Their deliverables included a detailed written report outlining discovered vulnerabilities and recommendations for addressing them, as well as a summary report for sharing with clients and stakeholders. They also conducted a retest after we addressed the vulnerabilities.
What is the team composition?
Between 2–5 team members from Secragon were assigned to our project.
How did you come to work with Secragon?
We found Secragon through a referral. We chose them because of their value for cost, company values, and quality.
What is the status of this engagement?
We worked together in October 2025.
RESULTS & FEEDBACK
What evidence can you share that demonstrates the impact of the engagement?
The engagement resulted in the identification of vulnerabilities in our platform, along with comprehensive written reports and guidance on remediation. The retest confirmed that the vulnerabilities had been properly addressed, meeting our security objectives for the project.
How did Secragon perform from a project management standpoint?
Secragon delivered everything on time and demonstrated excellent project management throughout the engagement. Their communication via virtual meetings, emails, and messages was clear and effective, and the entire process was handled professionally.
What did you find most impressive about them?
I was particularly impressed by their creativity and technical expertise in penetration testing. They stayed up to date with the latest attack vectors, including prompt poisoning and other modern threats, in addition to covering the well-known vulnerabilities.
Are there any areas they could improve?
I cannot think of anything they could have done better. The team did a fantastic job throughout the project.
RATINGS
5.0
"We have worked with some big name providers in this space and no one has come close to what Secragon delivered."
Quality
5.0
Service & Deliverables
Schedule
5.0
On time / deadlines
Cost
5.0
Value / within estimates
Willing to Refer
5.0
NPS
Cybersecurity for IT Company
Application TestingCybersecurity
Less than $10,000
December 2025
5.0
Quality
5.0
Schedule
5.0
Cost
5.0
Willing to Refer
5.0
"They don’t just look at the code; they actively bypass complex protections."
Feb 10, 2026
Information Security Officer (ISO), IT Company
Anonymous
Information technology
Sofia, Bulgaria
201-500 Employees
Online Review
Secragon conducted penetration testing for an IT company. The team evaluated the client's security posture against common attack vectors and provided recommendations to address identified vulnerabilities.
Secragon's work improved the client's security posture. The team found vulnerabilities and provided deep insights into the client's API security and local storage encryption. Secragon's experts were proficient in reverse engineering and bypassing complex protections.
The client submitted this review online.
BACKGROUND
Please describe your company and position.
I am the Information Security Officer (ISO) of an information technology company
Describe what your company does in a single sentence.
IT company
OPPORTUNITY / CHALLENGE
What specific goals or objectives did you hire Secragon to accomplish?
1.Identify potential security vulnerabilities in the applications. 2.Evaluate the security posture against common attack vectors. 3.Provide actionable recommendations for addressing identified vulnerabilities. 4.Support regulatory, compliance, and internal security assurance requirements.
SOLUTION
How did you find Secragon?
Online Search
Referral
Why did you select Secragon over others?
High ratings
Pricing fit our budget
Great culture fit
Good value for cost
Referred to me
Company values aligned
Describe the scope of work in detail. Please include a summary of key deliverables.
Mobile application
RESULTS & FEEDBACK
What were the measurable outcomes from the project that demonstrate progress or success?
The project improved the overall security posture of the mobile applications. All findings were remediated and independently verified, reducing the risk of unauthorized access and data exposure and improving compliance and security readiness.
Describe their project management. Did they deliver items on time? How did they respond to your needs?
Secragon delivered a world-class mobile pentest for us. Their experts didn’t just find vulnerabilities; they provided deep insights into our API security and local storage encryption. Communication was seamless, the turnaround was impressive, and the remediation guidance was incredibly helpful. They are officially our go-to for mobile security
What was your primary form of communication with Secragon?
In-Person Meeting
Virtual Meeting
Email or Messaging App
What did you find most impressive or unique about this company?
While most companies look for basic OWASP vulnerabilities, Secragon is known for its proficiency in reverse engineering. They don’t just look at the code; they actively bypass complex protections like SSL Pinning, Root/Jailbreak detection, and anti-tampering mechanisms. This ensures they see the app exactly how a sophisticated hacker would—unfiltered.
Are there any areas for improvement or something Secragon could have done differently?
no
RATINGS
5.0
Quality
5.0
Service & Deliverables
Schedule
5.0
On time / deadlines
Cost
5.0
Value / within estimates
Willing to Refer
5.0
NPS
Showing 1-4 of
4 Reviews
Our Story
Secragon’s founder brings hands-on cybersecurity experience dating back to the 1990s and coaches Bulgaria’s national cybersecurity team. His work in security research, exploit development, and custom tooling shapes our technical approach. We bring that investigative mindset to every engagement, combining offensive techniques with practical defensive engineering to help clients understand and improve their security.
Contact Secragon
If you’re not seeing exactly what you need here, send this company a custom message.
You can talk about your project needs, price, and timeline to get started on your project.
Sign in to see which brands trust Secragon.
Get connected to see updates from Secragon like new case studies, latest reviews, their latest masterpieces in their portfolio, delivered straight to you.
