Find the way in before someone else does.
ENIGMAIQ is an offensive security consultancy based in Athens. Its team runs red-team operations, penetration tests and vulnerability research, and builds the tooling and automation that make this work repeatable.
Services
Five practices, one team. Every engagement is run by the people who do the testing.
-
Red teaming
Objective-driven adversary emulation across people, processes and technology.
-
Penetration testing
Manual-first testing of web apps, APIs, networks, Active Directory, cloud and mobile.
-
Vulnerability research
Reverse engineering, fuzzing and exploit development for products, protocols and firmware.
-
Red-team tooling and automation
Custom offensive tooling, attack infrastructure as code and automated testing.
-
IoT and embedded security
Hardware, firmware, radio and the cloud behind connected devices.
What you can expect
- Manual first
- Scanners find the obvious. The findings that matter come from people reading code, chaining weaknesses and thinking like an attacker.
- Confidential by default
- Client data stays encrypted at rest and in transit, is kept only as long as needed and is destroyed when the engagement closes.
- Clear findings
- Every issue comes with evidence, a realistic severity and a fix. No padding with noise to make the report look longer.
- Local and international
- Based in Athens, working with clients across Europe, in Greek or English.
Named after a cipher machine
The Enigma cipher was broken less by attacking its maths than by exploiting operator habits and small design shortcuts. ENIGMAIQ looks for the same kind of weakness in modern systems.
What do you need tested?
Send a short description of your environment and goals.