All offensive work is contracted and authorised. Operators use callsigns only (Ivxx to Vxx). Zero-knowledge report storage and crypto/XMR billing available for sensitive private engagements.
Index of public SilkSpider capabilities: scoping tools, disclosure channels, client workspaces and specialised service lanes.
Full-spectrum offerings under written RoE, from web/API to specialised domains.
Filter tactics and see how SilkSpider offerings map to common adversary techniques.
Rough effort and cost bands for common assessment types before intake.
Check demo or production engagement attestations against published keys.
Coordinated disclosure registry, embargo clocks and responsible reporting path.
Callsign public keys for encrypted intake and report delivery.
Assessment progress, encrypted report vault and remediation tracker (demo login).
Gated exposure lookup for authorised investigators. Approval and billing required.
CVE notes, incident summaries and advisory-style posts.
Request an authorised assessment with scope and timeline details.
Chip-off, firmware and device attack-surface reviews for OEMs and product teams.
Critical infrastructure assessments with safety-first rules of engagement.
Prompt injection, data leakage and model integration reviews for AI/LLM Security and FinTech.
Kubernetes, IAM and multi-cloud control-plane exposure testing.
Authorised physical intrusion and phishing simulation under strict RoE.
Smart contract review and exchange/protocol attack-surface work.
Binary analysis and malware-adjacent research support for defence teams.
Enterprise identity, Kerberos and hybrid AD attack-path assessment.