2019-26©
SilkSpider™
All rights reserved
Built by SilkSpiderdev
2019-26©
SilkSpider™
All rights reserved
Built by SilkSpiderdev
2019-26©
SilkSpider™
All rights reserved
Built by SilkSpiderdev
2019-26©
SilkSpider™
All rights reserved
Built by SilkSpiderdev
2019-26©
SilkSpider™
All rights reserved
Built by SilkSpiderdev
[
SS®
‒
firm /
Firm overview
]
About s̃pider®
An authorised testing firm built around callsign operators,
scoped work and defensive outcomes under contract.
An authorised testing firm built around callsign operators, scoped work and defensive outcomes under contract.
2019-26©
[
SS®
‒
Our posture /
Our doctrine
]
[
SS®
‒
Our posture /
Our doctrine
]
Spider Firm started in 2019 with a simple belief: good security should feel clear, scoped, and accountably authorised. We still build everything around that idea.
Spider Firm started in 2019 with a simple belief: good security should feel clear, scoped, and accountably authorised. We still build everything around that idea.
Spider Firm started in 2019 with a simple belief: good security should feel clear, scoped, and accountably authorised. We still build everything around that idea.
Spider Firm started in 2019 with a simple belief: good security should feel clear, scoped, and accountably authorised. We still build everything around that idea.
Neiden Co.
Neiden Co.
We believe strong security work starts with understanding the problem first. Scope gives every decision purpose, while testing turns that into findings clients can remediate.
Our services bring network, application, cloud and identity testing into one coherent engagement. Nothing is out of scope by accident and nothing is added without authorisation.
EST. 2019
18+ engagements
[
SS®
‒
ops life /
Daily notes
]
Life at Neiden
Life at
Neiden
A glimpse into how we operate under
authorisation, not faces or public profiles.
Engagements Delivered
+6 Scoped YTD
Years Operating
Since 2019
Scoped Clients
90% Retests
[
SS®
‒
ops life /
Daily notes
]
Ops at SilkSpider
A glimpse into how we operate under
authorisation, not faces or public profiles.
Engagements Delivered
+6 Scoped YTD
Years Operating
Since 2019
Scoped Clients
90% Retests
[
SS®
‒
OPERATORS /
Partner builds
]
Different disciplines and callsigns (Ivxx-Vxx) come
together for stronger scoped authorised testing outcomes.
Different disciplines and callsigns (Ivxx-Vxx)
come together for stronger scoped authorised testing outcomes.
Different disciplines and callsigns (Ivxx-Vxx) come
together for stronger scoped testing outcomes.
[
SS®
‒
OPERATORS /
Partner builds
]
Different disciplines and callsigns (Ivxx-Vxx) come together for stronger scoped testing outcomes.
One Firm.
One Firm.
One Firm.
RETEST RATE 82%
RETEST RATE 82%
001.
/
Roles callsigns
Callsign Operators
002.
/
Labs tests
Offsec Disciplines
003.
/
Test report
One Firm
[
SS®
‒
RESEARCH /
Mentions
]
Our
awards
Notes on selected research and coordinated disclosure,
not public faces or personal bios.
Advisory
Mentions
Year
Research
Research
Scoped Finding
26©
DISCLOSURE NOTES
DISCLOSURE NOTES
Reverse Engineering
26©
Research
Research
Advisory Mention
25©
DISCLOSURE NOTES
DISCLOSURE NOTES
Retest Pass
25©
ADVISORY
ADVISORY
Scoped Finding
25©
CVE NOTES
CVE NOTES
Reverse Engineering
24©
[
SS®
‒
RESEARCH /
Mentions
]
Our
awards
Notes on selected research and coordinated disclosure,
not public faces or personal bios.
Advisory
Mentions
Year
Research
Research
Scoped Finding
26©
DISCLOSURE NOTES
DISCLOSURE NOTES
Reverse Engineering
26©
Research
Research
Advisory Mention
25©
DISCLOSURE NOTES
DISCLOSURE NOTES
Retest Pass
25©
ADVISORY
ADVISORY
Scoped Finding
25©
CVE NOTES
CVE NOTES
Reverse Engineering
24©
[
SS®
‒
HISTORY /
Firm timeline
]
[
SS®
‒
HISTORY /
Firm timeline
]
The
Journey
The
Journey
A story of scoped testing, research posture,
and continuous improvement.
A story of scoped testing, research posture,
and continuous improvement.
We don't chase noise or expand scope for the sake of novelty. We focus on authorised paths, clear findings and measurable remediation.
We don't chase noise or expand scope for the sake of novelty. We focus on authorised paths, clear findings and measurable remediation.
We don't chase noise or expand scope for the sake of novelty.
We focus on authorised paths, clear findings and measurable remediation.
IIIxx
Head of AppSec
at
Spider®
2019-20
Building the Firm Foundation
Started as a focused security practice for authorised testing, research and defence outcomes.
2021–22
Expanding Beyond Pure Offsec
Added new capabilities, collaborated with specialists and took on larger business challenges.
2023–24
Scaling Services and Processes
Developed a more structured workflow while delivering increasingly complex scoped engagements.
2025–Present
Focusing on Retainer engagements
Working closely with scoped clients through retainer testing, retest cycles and continuous attack-path reduction.
2019-20
Building the Firm Foundation
Started as a focused security practice for authorised testing, research and defensive outcomes.
2021–22
Expanding Beyond Pure Offsec
Added new capabilities, collaborated with specialists and took on larger business challenges.
2023–24
Scaling Services and Processes
Developed a more structured workflow while delivering increasingly complex scoped engagements.
2025–Present
Focusing on Retainer engagements
Working closely with scoped clients through retainer testing, retest cycles and continuous attack-path reduction.
2019-20
Building the Firm Foundation
Started as a focused security practice for authorised testing, research and defensive outcomes.
2021–22
Expanding Beyond Pure Offsec
Added new capabilities, collaborated with specialists and took on larger business challenges.
2023–24
Scaling Services and Processes
Developed a more structured workflow while delivering increasingly complex scoped engagements.
2025–Present
Focusing on Retainer engagements
Working closely with scoped clients through retainer testing, retest cycles and continuous attack-path reduction.
2019-20
Building the Firm Foundation
Started as a focused security practice for authorised testing, research and defence outcomes.
2021–22
Expanding Beyond Pure Offsec
Added new capabilities, collaborated with specialists and took on larger business challenges.
2023–24
Scaling Services and Processes
Developed a more structured workflow while delivering increasingly complex scoped engagements.
2025–Present
Focusing on Retainer engagements
Working closely with scoped clients through retainer testing, retest cycles and continuous attack-path reduction.
[
SS®
‒
OPERATORS /
Operators
]
Callsigns Ivxx through Vxx who
shape every engagement from scope to retest.
[
SS®
‒
OPERATORS /
Operators
]
Callsigns Ivxx through Vxx who
shape every engagement from scope to retest.
Behind SilkSpider.
EST. 2019
[
SS®
‒
CONTACTS /
Engage path
]
Whether you need a first assessment or a retest,
request scoped work with written authorisation.
Request intake
Services for
May
3
left
Local time:
4 вересня, 09:48
[
SS®
‒
CONTACTS /
Engage path
]
Whether you need a first assessment or a retest,
request scoped work with written authorisation.
Request assessment
Services for
May
3
left
Local time:
4 вересня, 09:48
[
SS®
‒
CONTACTS /
Engage path
]
Whether you need a first assessment or a retest,
request scoped work with written authorisation.
Request intake
Services for
May
3
left
Local time:
4 вересня, 09:48
[
SS®
‒
CONTACTS /
Engage path
]
Whether you need a first assessment or a retest,
request scoped work with written authorisation.
Request intake
Services for
May
3
left