Penetration testing
Manual testing of web applications, APIs, and mobile apps. Authentication, access control, and business logic, validated with reproducible evidence.
Offensive security. US-incorporated.
We find the flaw
before the breach.
Manual penetration testing, source-code review, and security automation. Validated findings with the evidence and guidance to fix them.
OSWEOSCPOSWPEWPTXEWPTVHL Advanced+
Capabilities
Offensive security,
end to end.
From application logic to cloud permissions. Testing, review, and response across your attack surface.
Cloud & AI security
AWS, Azure, and GCP assessments. Cloud permissions, exposed services, prompt injection, and unsafe tool access in AI applications.
Source code review
Follow authentication flows and trace untrusted input through your code. Investigate authorization flaws and vulnerable application logic.
SAST automation
Rules tailored to your frameworks and code patterns, integrated into pull requests with baseline triage and remediation guidance.
SOC automation
Set up detection workflows and automate alert triage, threat correlation, and incident prioritization.
Incident response
Digital forensics, evidence collection, root-cause analysis, and containment planning when an incident needs investigation.
Threat hunting
Investigate signs of compromise, lateral movement, and persistent access across your environment.
Configuration review
Review cloud resources, servers, firewalls, and network devices against your security requirements and CIS benchmarks.
Code security
Make security part
of the pull request.
Custom rules for your stack, connected to your development workflow. We handle setup and triage with your engineers.
Explore SAST packages- Rules for your codebase
- Checks tailored to your frameworks, libraries, and application patterns.
- CI/CD integration
- GitHub Actions, GitLab CI, or Bitbucket Pipelines, with findings surfaced in code review.
- Baseline triage
- Review the initial results, tune false positives, and prioritize the issues your team should investigate.
- Fix guidance
- Developer documentation, weakness classifications, and a walkthrough with your team.
A clear process.
Findings you can use.
Every assessment includes a technical report, an executive summary, and time to discuss the fixes.
Request a sample reportAgree the scope
Targets, access, testing windows, and rules of engagement. A fixed quote before testing begins.
Test and validate
Manual investigation alongside automated checks. Urgent findings shared during the assessment.
Document the findings
Reproduction steps, severity, business impact, and remediation guidance for your engineers.
Verify the fixes
A 30-day retest is included with a one-time assessment, with results documented for your team.
Open source & research
Tools we build
in the open.
Explore our tools and technical research. Read the code, follow an attack path, and see how we approach the work.
keyFinder
Discover exposed API keys and secrets while browsing. An extension for Chrome and Firefox.
VulnHawk
Framework-aware static analysis, with SARIF output and GitHub Actions integration.
HTB Writeups
Hack The Box walkthroughs, attack paths, and exploitation notes. The reasoning behind the result, step by step.
AgentGuard
Check the packages, repositories, and downloads that coding agents bring into your environment.
We build software, too. JMacy is our download manager for macOS, with parallel downloads, browser capture, and built-in torrents.
Explore JMacyPricing
Engagement plans.
Choose an assessment or ongoing support. The final scope and price are agreed before work starts.
One-time assessment
from $3,500
A scoped pentest of your application or infrastructure.
- Executive summary and technical report
- Validated findings and remediation guidance
- Letter of attestation
- 30-day retest included
Monthly retainer
$2,500 / month
Ongoing testing for teams shipping new features regularly.
- Weekly scanning and monthly manual testing
- Security review of new features
- Dedicated Slack or Teams channel
- Monthly report and priority critical response
Estimate your assessment
An indicative range. We confirm it after reviewing your scope.
One-time assessment
$3,500 - $5,600
5-8 testing days. Final quote depends on scope.
Code review & SAST automation
Custom rules, CI/CD integration, and a walkthrough with your team.
Starter
1 repository, 1 language
$500
Custom and curated rules, pipeline integration, and a 30-minute walkthrough. Delivery in 3-5 days.
EnquireProfessional
Up to 3 repositories, 2 languages
$1,000
Framework-specific rules, baseline triage, fix guides, a 1-hour walkthrough, and 2 weeks of support. Delivery in 5-10 days.
EnquireEnterprise
Up to 10 repositories, any languages
$2,000
Multi-repo reporting, internal-framework rules, training documentation, first-quarter rule updates, a 2-hour walkthrough, and 4 weeks of support.
EnquireIndependent.
Engineer-led.
Moamen Basel
Founder, GreyCore Labs
GreyCore Labs is an independent offensive security firm founded by Moamen Basel. His work spans offensive and defensive security, across web applications, infrastructure, and mobile, since 2014.
You speak with the engineer doing the assessment, from the first scoping conversation through the retest.
OSWEOSCPOSWPEWPTXEWPTCRTO
GreyCore Labs LLC is incorporated in Wyoming, USA. NDAs and MSAs are available before an engagement.
Common
questions.
How long does a pentest take?
Most web application assessments take 5-10 business days, depending on scope. We share preliminary findings during testing so your team can begin remediation.
What access do you need?
We agree this during scoping. Application testing may require test accounts for each role, API documentation, and a suitable test environment. Code review requires access to the repositories in scope.
Can the report support an audit?
The technical report and letter of attestation can support SOC 2, ISO 27001, and customer security reviews. Findings include severity, reproduction steps, and remediation guidance. Your auditor determines whether the evidence meets their requirements.
Do you sign an NDA?
Yes. We can sign an NDA before discussing sensitive details and work with your legal team on an MSA.
What does the free scan cover?
Automated checks of your external attack surface, including subdomain discovery, technology fingerprinting, known vulnerabilities, and configuration issues. You receive a one-page report. It does not include a manual pentest.
How soon can you start?
We reply to scoping requests within 24 hours. Engagements typically start within 1-2 weeks. Include your deadline so we can confirm availability.
Free external
security scan.
Request a free automated scan of a domain you own. Receive a one-page report within 48 hours.
Includes subdomain discovery, known vulnerability checks, and configuration review. No purchase required.
Start a conversation
Tell us what
needs testing.
contact@greycorelabs.com Send your scope, stack, and deadline. Moamen will reply within 24 hours.