ReconixPROOF-FIRST OFFENSIVE
Human testers in the seat beside you, from scope to retest.
Your cybersecurity co-pilot
Every engagement runs as PROVE: Every Fix Verified. Every finding we report carries evidence; every Critical and High carries a working PoC and a named tester's signature, and the fee covers one retest of every Critical and High finding. We have assessed 100+ organizations and served 6+ Thai banks, including tier-1.
01Services
Each service page lists its scope and deliverables.
Manual testing of your web applications against the OWASP Top 10 and the business logic behind them.
iOS and Android testing of the app and the backend APIs it calls, mapped to BOT mobile banking security requirements.
Internal and external network testing that finds lateral movement paths and Active Directory misconfigurations.
AWS, Azure, and GCP testing for IAM misconfigurations, exposed storage buckets, and serverless weaknesses.
Web, mobile, API, network, and cloud testing in one scope, with a report your team can file as BOT and PDPA evidence.
Expert-verified scanning of your systems and networks, ranked by risk so you know what to fix first.
Audit findings backed by exploitation evidence and mapped to the BOT, PDPA, and PCI DSS controls your auditor checks.
Audits of DeFi, NFT, and DAO protocols on Ethereum, BSC, Solana, and Bitkub Chain.
Objective-based adversary simulation aligned to MITRE ATT&CK that tests your SOC and incident response.
Attacks on LLM applications and AI agents: prompt injection, jailbreaks, data leakage, and tool abuse.
SAST plus manual review that finds logic flaws and implementation bugs in your source before it ships.
vCISO services, security program development, and compliance guidance for BOT, SEC, and PDPA.
Authorized phishing campaigns with Thai-language lures and click and report metrics by department.
Role-based training delivered by active penetration testers, in Thai or English, measured before and after.
02Assessment guide
Each one answers a different question. Pick the one that matches what you need to prove.
03Delivery process
We plan the engagement, run the offensive, orient your team to the fix, verify it holds, and hand over the evidence.
Owner
Reconix with your project team
Deliverables
Closes when
Scope, written authorization, and Rules of Engagement are signed, and the readiness test passes.
Sample data
PI2000001RoE signed, scope locked
Owner
Reconix testers
Deliverables
Closes when
A named tester has reproduced and signed every Critical and High finding, with its PoC attached.
Sample data
PI2000001-07IDOR on /statements, PoC captured
Owner
Your developers and system owners, advised by Reconix
Deliverables
Closes when
You declare each fix deployed and describe what changed.
Sample data
PI2000001-07chained with weak session, rated High
Owner
Reconix testers
Deliverables
Closes when
A finding closes only when the fix holds under a retest. One retest of every Critical and High finding is part of every engagement.
Sample data
PI2000001-07original PoC replayed: 401, retest passed
Owner
Reconix, delivered to your system owner
Deliverables
Closes when
Your system owner receives the human-attested report.
Sample data
PI2000001report issued, 7 findings, 7 with PoC
04AI and human roles
AI agents widen coverage inside the scope you authorized. Our testers test hands-on in every engagement; the depth you choose sets how much, from proving what the agents found to leading the whole test. A named tester reproduces and signs every Critical and High finding before it reaches your report, and AI issues no finding on its own.
Authorized scope
AI agent
Broad checks inside the agreed scope
Human tester
Tests by hand; your depth sets how much
Proof
Every Critical and High reproduced by a tester
Report
Signed by a named tester
We test only with your written authorization and agreed Rules of Engagement.
05Team and records
Our 20+ offensive security specialists hold these certifications. Reconix is a BAYCOMS and Beryl 8 Group company.
CISSP
CC
OSCP
OSCP+
OSWE
OSEP
OSED
OSCE3
PNPT
CRTP
GWAPT
CPTS
COAE
Pro Lab Dante
Pro Lab Zephyr
Pro Lab Cybernetics
Pro Lab APTLabs
PenTest+
Security+
SecurityX
CySA+
CNSP
CNVP
CSAP
CSIE
CSAE
eWPT
eMAPT
eCPPT
eWPTX
CEH
CRTA
MCRTA
CRT-ID
kAIPTA
Each placement is the achievement of the individual members who competed for it.
06Our group
Reconix is the offensive security company of BAYCOMS, the cybersecurity arm of Beryl 8 Group.
07Industries served
6+ Thai banks, tier-1 among them, plus insurers running critical digital services.
Fintech platforms and payment processors.
Decentralized applications, DeFi protocols, and token issuers.
Technology companies and software development firms.
Energy production, oil and gas, petrochemicals, and utility services.
Logistics, retail, and consulting.
08FAQ
Still have a question? Our testers answer it for your environment. Schedule a scoping call
We price from scope: the systems you need tested, which of our 8 attack surfaces they cover (web, mobile, API, cloud, infrastructure, ATM, smart contract, and AI/LLM application), and the tester man-days that depth of testing takes. One retest of every Critical and High finding is priced into every engagement; retesting until it holds is a separately priced option. Send us your scope and we return a quotation.
Duration follows scope, so we set the timeline with you while scoping and put it in the proposal. Two commitments hold on every engagement: we are ready to kick off within 72 hours from our side, on a date your availability sets, and we report critical findings within the day we discover them.
A report in Thai or English, your choice. It opens with an executive summary for your board and auditors, then gives your engineers the full technical detail. Each finding carries a CVSS severity, evidence, the business impact, and remediation steps, and every Critical and High also carries a working PoC. After the retest, the report records which fixes held and the residual risk that remains.
Confirm the systems in scope, sign the written authorization and Rules of Engagement, and agree the channel where we flag findings during testing. We run a readiness test to confirm we can reach the targets. We recommend a staging or UAT environment that mirrors production; if testing must run in production, we work in agreed windows with non-destructive methods. Cloud scope starts with read-only access. If you share source code, we add white-box analysis.
We encrypt findings and transmit them securely. We do not extract, store, or share the personal data of your users; when a finding exposes data, the evidence shows it with fake data. Our team signs NDAs and handles engagement information under PDPA. Source code moves over encrypted transfer into restricted-access review environments, or we review it inside your environment over VPN. Cloud access is temporary and logged, and it ends when testing ends.
BOT requires licensed financial institutions to run annual intelligence-led penetration testing under its IT Examination framework, and sets mobile banking controls in BOT Guideline 4/2568. SEC requires capital market operators and digital asset businesses to undergo cybersecurity assessments covering vulnerability assessment, penetration testing, code review, and smart contract audit. OIC sets IT governance and security requirements for insurers to protect policyholder data. PDPA Section 37 requires adequate technical safeguards from any organization that handles personal data. We map each finding to the clause it affects, and each framework has its own page under Compliance.
Stay up to date with the latest security news and insights from our experts
รีวิว HTB COAE (Certified Offensive AI Expert) ใบรับรอง AI Red Teaming จาก Hack The Box ที่ทำร่วมกับ Google ข้อสอบเป็น engagement 7 วัน แล้วส่งรายงาน
ช่องโหว่ใน firmware COLDCARD ตั้งแต่ปี 2021 ทำให้ seed ถูกสร้างจาก PRNG ที่คาดเดาได้ ปลายกรกฎาคม 2026 Bitcoin 594 BTC จากราว 500 wallet หายไปในไม่ถึง 30 นาที
A clean source-code audit does not guarantee a clean binary. How the trusting trust compiler backdoor works, why it persists, and what actually catches it.
Book a scoping call. We map your targets with you and send a quotation priced on that scope.
