CovertSwarm
About CovertSwarm
If you release code, hire people, open new premises or change your board more often than you attack yourself, you are not keeping pace with your own risk. CovertSwarm was founded in 2020 on that argument, frustrated that organizations relied on occasional penetration tests, thick reports and long gaps in between.
The Swarm runs realistic attacks across digital, physical, and social environments, then shows how weaknesses chain into paths an attacker could use against the business.
What we write about
- Continuous offensive security testing: Why occasional testing can’t keep pace with how often your organization changes.
- Emerging threats: New attack techniques and what they could let an attacker do to your organization.
- Offensive AI and AI security: Prompt injection, multi-agent risk and how attackers can turn AI and agentic systems against the organizations running them.
- Red teaming and adversary simulation: Chaining weaknesses into the attack paths a real adversary would follow.
- Regulatory threat-led testing: CBEST, STAR-FS and threat-led testing, from a team with CREST accreditation for both.
- Physical security and social engineering: Getting into buildings and past staff, and what that access exposes.
- Vulnerability research: Flaws in software and systems, and what an attacker could do with each one.
Latest posts
What is a Physical Penetration Test?
A physical penetration test (pen test) is where an ethical hacker or social engineer will try to gain entry to one of your locations, such as an office building, warehouse, storage facility or data centre.
How Secure are TPM Chips?
This article demonstrates that the security of BitLocker for full disk encryption - when deployed in conjunction with Trusted Platform Module (TPM) - is no longer enough to effectively ensure the confidentiality of that encrypted data.
What is CREST Certification?
CREST is the Council of Registered Security Testers. CREST is an international not-for-profit accreditation and certification body that represents and supports the technical information security market.
What is PCI Pen Testing?
Payment Card Industry (PCI) Penetration Testing or more commonly shortened to PCI Pen Testing is running penetration tests for the purposes of the PCI Data Security Standards (DSS) compliance.
What is an OSCP Penetration Test?
An OSCP Penetration Test or OSCP Pentest typically means that a Penetration Test is carried out by someone who has achieved the Offensive Security Certified Professional (OSCP) certification. The OSCP is a Penetration Testing certification run and managed by an organisation called 'Offensive Security'.
What is Nmap in Cyber Security?
Nmap is a port scanning tool used by penetration testers and hackers to identify exposed services.
Internal vs External Pen Testing
The aim of the pen test is to identify weaknesses and flaws within the infrastructure’s attack surface and leverage them to gain elevated and persistent access.
What is a False Positive in Cyber Security?
A false positive within cyber security refers to an alert or vulnerability that has been incorrectly flagged, usually caused by unpredictable behaviour which is triggered by a test case.
What are the Best Laptops for Pen-testers?
There isn't really such a thing as 'the best laptop' for a pentester to use. It also really depends on the type of pen test you are conducting. We suggest you go with what budget you can afford and opt for as much RAM as possible for running virtual machines (VMs).
What is Cloud Pentesting?
Cloud Penetration Testing or 'Pentesting' typically refers to the testing of a Cloud-hosted environment such as against Amazon Web Services (AWS), Google Cloud Platform (GCP) or Microsoft Azure.
What is an Android Pentest?
Penetration testing an Android application involves both the application operation, similar to how a web application test is performed through capturing the outbound and inbound network traffic and targeting the APIs or web services used by the application, along with the client application and how it operates on the device itself.
CovertSwarm Gains Further Accreditation with CREST STAR
CovertSwarm is modernising the penetration testing, red teaming, and bug bounty industries with its challenger Constant Cyber Attack™ service. Today, they announce another achievement in what continues to be a successful year: CovertSwarm is now accredited to provide penetration testing services under the CREST Simulated Targeted Attack and Response (STAR) scheme.
CovertSwarm Achieves CREST Accreditation
CovertSwarm has been formally accredited by CREST, one of the cyber industry's most respected bodies. This validates the rigour behind our Constant Cyber Attack™ service and reinforces our commitment to setting a new standard in continuous offensive security.
Improving Internal Cybersecurity Engagement – Q&A
CovertSwarm is a modern and growing cyber security business that defends an increasing number of global organisations.
CovertSwarm launches their proprietary Portal
CovertSwarm is modernising the Penetration Testing, Red Teaming, and Bug Bounty industry with their challenger Constant Cyber Attack™approach that is underpinned by the launch of their latest innovation: the CovertSwarm Portal. 12 APRIL 2021 – London, UK – CovertSwarm, a…
Is your Security Operations Centre awake? Your adversaries are. And so are we.
It is time for conventional cyber security measures to be challenged. CovertSwarm’s Constant Cyber Attack service is the answer.
Rattle the lock on your SOC
With CovertSwarm support your SOC team can focus on better threat management, recovery, and remediation.
Rattle the lock on your SOC – Time to constantly test your Security Operations Centre
Global IT spending is forecasted to reach $3.9 Trillion in 2020, and for good reason: 68% of business leaders feel that cybersecurity risks to their organization are increasing, which makes cyber a business priority for businesses across the globe.
Is your Penetration Testing Program delivering the value you expect to your business?
Penetration testing is delivered by certified and expert testers and is very likely to be part of your business’ security control set.
But with a variety of testing concepts, methodologies and vendor services available on the market, have you ever stopped to explore whether your pen testing program is delivering the value you expect to your business?
New Styles of Cyber Attack Detected against Businesses & Supply Chain Partners
Since the start of the COVID-19 pandemic, CovertSwarm has detected a significant increase in the number of new and highly-targeted cyber attacks against organisations and their supply chain partners.
‘As A Service’ (AAS) Overload – Providing Context to ‘AAS’ in Cybersecurity
It seems that most things in the technology world can be procured ‘As A Service’ today: we have ‘PenTest As a Service’ (PTaaS), ‘Cybersecurity As a Service’ (CaaS), ‘Red Team As a Service’ (RTaaS), ‘SOC As a Service’ (SaaS or SOCaaS); the examples are seemingly endless.
Are you a Cyber Rebel?
The cyber industry is saturated with security companies providing out-dated, snap-shot ‘Penetration Testing’, ‘Red Team’ and ‘Ethical Hacking’ services.
Accelerate your cybersecurity posture with a CovertSwarm of security professionals
Consultancies running Penetration Tests and Red Team engagements operate an isolated, point-in-time and transactional approach to cyber delivery. With CovertSwarm you benefit from a collective approach to offensive engagement: Our ethical hackers working together to constantly compromise you whilst working…
Annual Penetration Testing is no longer enough
The ‘annual penetration test’ has long been a cornerstone of cybersecurity defences for organisations of all sizes.