Cooking...
ASEC was founded in 2014 by Nick Aleks, an offensive security practitioner who has spent over a decade breaking into the systems others won't touch. Web, cloud, hardware, RF, OT, and autonomous platforms: the breadth is the moat.
Every artifact reads like it was made by operators who break things for a living. Demonstrated access over theoretical risk. Zero compliance theater. When we brief a client, we show them the path we walked, the credentials we captured, and the business impact of each finding, not a colour-coded risk matrix.
We brief impact, not findings. The deliverable is the path to compromise and the window we closed, not a CVSS spreadsheet. Every engagement ends with a plain-language executive brief that answers one question: what could an adversary have done, and how long did they have to do it?
Exposure window is the metric that matters. The time between a vulnerability existing and an adversary exploiting it is the only number that directly translates to business risk. We measure it, report it, and work to close it faster than the adversary can move.
Web, cloud, mobile, IoT, OT, UAS, hardware, RF. Breadth is the moat, expressed through one disciplined system. Most firms can test your web app. Few can also land on your drone's telemetry link and walk the RF spectrum. We can, and we do.
Stated quietly, never waved. All data stays in Canada. All operators hold Canadian security clearance eligibility. The single white maple mark and a monospace "Toronto, Canada" do the work no flag could. We are embedded in the Canadian defence and security ecosystem by design.
Founder + Chief Hacking Officer
Most firms cite the playbook. We wrote it. Three No Starch Press titles authored by the ASEC team, the references other offensive engineers actually learn from.
The people testing you wrote the books your team studies.
Attacking and defending GraphQL APIs.
Bash for offensive operations.
Radio recon, telemetry attacks, autonomous-system tradecraft.
Federal defence procurement signal
Sovereign-Canadian defence collective
Threat-intel community, Big Six banks and telcos
National cyber industry cluster