Offensive security · Europe
We find it before someone else does. Hivexia runs penetration tests against the systems you actually depend on, and hands you findings your engineers can act on, not a scanner export with the logo changed.
Evidence 02.1
GET /api/v1/invoices/40112 HTTP/1.1
Host: portal.example.com
Cookie: session=<account A>
HTTP/1.1 200 OK
{"id":40112,"customer":"<account B>",
"vat":"5*******","total":"1 480,00"}Remediation. Authorise every record server-side against the session owner. An identifier in the path is a request, not a permission.
What we do
Eighteen services and one open door, but only one argument. Most clients start in the first column and move right as the obvious problems get fixed.
01 · Identify
Controlled attacks against your real systems, with every finding exploited and validated by hand before it reaches your report.
02 · Fix
Finding the problem is the easy half. We stay involved through remediation, working with your team in the language and stack they already use.
03 · Prevent
Training built from what we found in your own environment, so the examples are systems the people in the room recognise.
04 · Anything else
Some of the work we are proudest of did not fit a category when it arrived. We have tested smart TV applications, and we regularly look at targets we have never seen before.
Describe what you have. We will tell you what a test would look like and what it would cost, or tell you plainly that we are not the right people for it. Both answers are worth having.
Engagements
Most work is a fixed-scope test at a fixed price. What changes between clients is what we count to size it, and that count is what both sides can hold each other to later.
Scoped by
URLs · applications · user roles
Public IP addresses · exposed services
Servers · domains · network segments
Applications · platforms · APIs
Users with email accounts
Assets under watch · monthly cycles
Twenty IP addresses, sixty-five URLs, three user roles. If we cannot count it we cannot quote it honestly, and you cannot check afterwards that you got it.
Once the scope is set, the price is set. If we find the environment is materially larger than described, we come back to you before doing the work, not after.
Validating your fixes is included in the original price. A finding you have closed should not cost you again to prove closed.
What you receive
Buyers are told to ask every vendor for a sample report before signing, and most cannot produce one. Here are real pages, with the client name, hostnames and reference anonymised.
Every finding carries a permanent identifier in the form HVX-20XX-000-03, so it can be referenced without ambiguity in retests, audits and correspondence with third parties. Reports are delivered in Portuguese or English. The pages above are from a 2025 engagement scored under CVSS v3.1; current engagements are scored under v4.0.
Severity is scored, not asserted
Credentials
Our team has worked across web, network and operational technology, including ICS environments where few providers have validated competence. You are told who runs your engagement before it starts.
A scoping call takes about thirty minutes. Bring the systems you are worried about and we will tell you honestly whether a test is the right next step.