SOCIAL
The most exposed organisations get help last
The less budget an organisation has, the more a breach costs it. We spend part of our assessment capacity there.
Programmes
Free assessments for small businesses
Twelve companies a year receive a web application assessment and remediation guidance at no cost. Since 2021 we have supported 48 companies, including post-remediation retesting — a report alone rarely results in a fix.
Security education
Hands-on training for university security clubs and vocational high schools, built from real engagements with sensitive details removed. 380 people had completed the programme by 2024, and fourteen of them now work here.
Non-profit support
For non-profits handling donor personal data we review current processing practice and advise on minimising collection, at no charge.
2025 plan
-
12 free assessments
Six per half-year, prioritising companies under 10bn KRW revenue.
-
8 training sessions
Twenty participants each, focused on web and cloud misconfiguration labs.
-
Open-source tooling
Parts of our internal assessment automation will be cleaned up and published.
Frequently asked
How do we apply for a free assessment?
Calls open every February and August as a notice on this site. Submit the application with details of the target service and we will respond individually after review.
Is the scope different from a paid engagement?
It is limited to one web application and does not include penetration testing. The methodology and deliverable format are identical to paid work.
Can we get the training material?
Participating institutions receive the lab environment and materials. We do not distribute individually, but publishable material appears as engineering articles.