Cooking...
Offensive security for the systems everyone else won't touch: web, cloud, hardware, RF, OT, and autonomous platforms. We measure your exposure window and beat it.
Demonstrated access over theoretical risk.
Every artifact reads like it was made by operators who break things for a living. When we brief a client, we show them the path we walked, the credentials we captured, and the business impact of each finding. Not a colour-coded risk matrix. Not a CVSS score. The path to compromise, annotated.
The deliverable is the impact, not the spreadsheet.
We brief impact, not findings. Every engagement ends with a plain-language executive brief that answers one question: what could an adversary have done, and how long did they have to do it? No fluff. No compliance theatre. Findings are noise. Impact is signal.
Exposure window is the only metric that matters.
The time between a vulnerability existing and an adversary exploiting it is the only number that directly translates to business risk. We measure it, report it, and work to close it faster than the adversary can move. Speed is a security control. We enforce it.
Web to wireless, firmware to flight stack.
Web, cloud, mobile, IoT, OT, UAS, hardware, RF. Breadth is the moat, expressed through one disciplined system. Most firms can test your web app. Few can also land on your drone's telemetry link and walk the RF spectrum. We can, and we do.
Stated quietly. Never waved.
All data stays in Canada. All operators hold Canadian security clearance eligibility. We are embedded in the Canadian defence and security ecosystem by design. The single white maple mark and a monospace "Toronto, Canada" do the work no flag could.
If it flies, drives, or transmits, it's on our radar.
If it boots, it's in scope.
Every breach has a clock. We read it first.
Your exposure window is the only metric that matters.
Findings are noise. Impact is signal.
Access is the only deliverable.
We don't rank risk. We prove it.
Speed is a security control.
Gained unauthenticated access to building management systems via exposed Modbus interfaces. Physical perimeter bypassed using HID Prox cloning. Full lateral movement across floors 1-12 within 18 hours.
Identified critical AWS IAM privilege escalation chain allowing full account takeover from a read-only API key. Secondary GraphQL injection uncovered the entire transaction ledger. Zero-day window closed within 41 hours of first contact.
Exploited GraphQL batching to bypass rate limiting and brute-force user PINs at scale. iOS binary analysis revealed hardcoded staging credentials active in production. All findings triaged and patched in-sprint.
Details withheld under active NDA. Scope included cloud infrastructure, internal tooling, and physical red team component. Impact classification: Critical. Client reference available on request.
Most firms cite the playbook. We wrote it. Three No Starch Press titles authored by the ASEC team, the references other offensive engineers actually learn from.
The people testing you wrote the books your team studies.
Federal defence procurement signal
Sovereign-Canadian defence collective
Threat-intel community, Big Six banks and telcos
National cyber industry cluster
NICK ALEKS // TORONTO // 2026Founder + Chief Hacking Officer
