About CovertSwarm
We’re the story that needed to be told.
outpace genuine cyber threats.
CovertSwarm was born out of frustration with a broken system. Our founders saw it first-hand: companies ticking compliance boxes, running annual pentests, and still falling victim to real attacks. So, we rewrote the rulebook.
Instead of one-off audits and stale reports, we built a model that never stops. A constant, real-world cyber assault that mirrors how attackers think, move, and strike. Within weeks, demand proved we weren’t the only ones who believed the industry needed change.
Today, CovertSwarm operates as a remote-first, global team of ethical hackers, united by one purpose: to outsmart attackers by becoming the threat itself.
Over 100 security leaders subscribe to CovertSwarm.
Are you ready? Let’s find out.
Our mission: to outpace genuine cyber threats.
The threat of cyber attack is constant.
Attackers don’t wait for test windows. They don’t care about scopes or compliance. They’ll do whatever it takes to break in.
That’s why the most successful security leaders don’t just test. They attack. They subscribe to CovertSwarm.
We are the threat.
We emulate how real threat actors operate.
Our Swarm of elite ethical hackers attacks our clients’ full brand across digital, physical, and social vectors.
No artificial boundaries. No predictable playbook. You get a persistent adversary using real-world methods, doing whatever it takes to find a way in.
Stop testing. Start Attacking.
Every weakness we expose is one less surprise waiting.
Every attack makes you stronger and becomes intelligence. Every defence that holds becomes proof that your investments are working.
We keep pushing, you keep improving. So while genuine threat actors are looking for a way in, you’re already one attack ahead.
Certified to attack.
This isn’t about ticking boxes. It’s advanced offensive security, executed with the precision, discipline, and intent of a real adversary.
CovertSwarm is one of the few red teams in the world accredited to deliver both STAR-FS and CBEST: the most advanced threat intelligence-led frameworks available.
our values
Values aren’t something you just write on a wall. They guide us every step of the way and shape what we become.
We are the Swarm.
The Swarm always beats the individual. Knowledge flows. Momentum compounds. We hit harder together. No heroes.
Own it.
From problem to solution, we own the work, the quality, and the outcome. No excuses. No blame. No hiding behind tools. Excellence is non-negotiable.
Radical Candor.
We challenge directly, care personally, and never hide behind process. Invite feedback. Say it early. Fix it fast.
Don’t become a dinosaur.
Curiosity is mandatory. We hunt for signals others miss and challenge assumptions. Learn, adapt or face extinction.
Join the Swarm.
We’re here to fundamentally challenge the offensive security industry. We do it by building the world’s most elite team of ethical hackers.
Join our mission.
Latest posts
php2shell: moving beyond a lab proof of concept to code execution with ASLR enabled
The Swarm developed a working exploit for php2shell (CVE-2026-109618 and CVE-2026-109619). It achieved unauthenticated remote code execution with address space layout randomisation (ASLR) enabled and PHP error display disabled, in our tested AArch64 PHP 8.5.11 environment running Apache with mod_php.
Release: local checker for PHP2Shell (CVE-2026-109618 and CVE-2026-109619)
An Open Source host-local vulnerability checker for CVE-2026-109618 and CVE-2026-109619 (PHP2Shell).