# Sectricity

> Sectricity is a Belgian ethical hacking company, founded in 2020, with offices in Merelbeke (Belgium) and London (United Kingdom). We specialise in penetration testing, red teaming, on-demand pentesting through RedSOC (PTaaS), security awareness training and social engineering assessments. We test both systems and people, then deliver clear and actionable fixes. Because we operate independently of IT suppliers, our reports are objective and unbiased. We serve organisations in Belgium, the Netherlands and the United Kingdom.

Sectricity combines offensive security expertise with experiential learning. Every finding is manually validated by a human ethical hacker, never by tooling alone. Our pentesters are OSCP and CEH certified and work to the Penetration Testing Execution Standard (PTES) and OWASP guidelines. A retest is part of every engagement, not a paid add-on. All services are GDPR compliant and mapped to NIS2, DORA, ISO 27001 and the EU AI Act. Motto: Ethical Hackers. Human Validated. AI Accelerated.

Dutch version of this file: https://sectricity.com/nl/llms.txt
Extended reference: https://sectricity.com/llms-full.txt

## Services Overview

- [All Services](https://sectricity.com/services/): Full catalogue of offensive and human security services.
- [All Solutions](https://sectricity.com/solutions/): Security packaged by business need and by sector.
- [Request a Quote](https://sectricity.com/request-quote/): Tailored proposal for a security assessment.
- [Contact](https://sectricity.com/contact/): Offices in Belgium and the United Kingdom, response within 24 hours.

## Penetration Testing

- [Penetration Testing](https://sectricity.com/services/pentesting/): External (black box), internal (white box) and combined (grey box) testing by certified ethical hackers, with human validated findings and practical remediation guidance.
- [Web Application Pentest](https://sectricity.com/services/pentesting/web-applications/): Logic flaws, authentication bypasses and data exposure in websites, portals and web applications.
- [Network Pentest](https://sectricity.com/services/pentesting/network/): External and internal networks, misconfigurations, lateral movement and privilege escalation.
- [Cloud Pentest](https://sectricity.com/services/pentesting/cloud-pentest/): Cloud infrastructure testing and configuration review across Azure, AWS and Google Cloud.
- [API Pentest](https://sectricity.com/services/pentesting/api-pentest/): Authentication, authorisation and business logic testing of REST and GraphQL APIs.
- [Mobile App Pentest](https://sectricity.com/services/pentesting/mobile-apps/): iOS and Android apps, API integrations and local data storage on real devices.
- [WiFi Pentest](https://sectricity.com/services/pentesting/wifi/): Wireless networks, rogue access points and signal leakage outside the building.
- [AI and Agentic Systems Pentest](https://sectricity.com/services/pentesting/ai-systems/): LLM applications, AI agents, coding assistants, MCP servers and multi-agent workflows, including an AI Cyber Security Risk Assessment.
- [Physical Security Pentest](https://sectricity.com/services/pentesting/physical-security/): Can an unannounced visitor physically reach your data, servers and workplaces.
- [Compliance Pentest](https://sectricity.com/services/pentesting/compliance/): Audit ready testing and evidence for NIS2, DORA, GDPR and ISO 27001.
- [PTaaS, Pentesting as a Service](https://sectricity.com/services/pentesting/ptaas/): Human-led testing on demand instead of one fixed slot per year.
- [Rapid Response Pentest](https://sectricity.com/services/pentesting/rapid-response/): Fast turnaround assessment when a deadline, incident or go live cannot wait.
- [Retest](https://sectricity.com/services/pentesting/retest/): Verification that fixes actually work, included in the engagement.
- [Red Team Operations](https://sectricity.com/services/red-team/): Full scope adversarial simulation of people, process and technology over an extended period.
- [RedSOC, On-Demand Pentesting by Ethical Hackers](https://sectricity.com/services/redsoc/): Sectricity's PTaaS engagement model. Request a human-led test when an environment changes, when a tool flags a finding or when an audit needs proof. 35 services through one engagement model, tests start within days, credit based with no fixed annual contract, audit-grade report per engagement.

## Security Awareness

- [Security Awareness](https://sectricity.com/services/security-awareness/): Workshops, phishing simulations, e-learning and the Security Awareness Escape Truck.
- [Awareness Training](https://sectricity.com/services/security-awareness/training/): Live and hands on sessions built around real attack scenarios.
- [E-learning](https://sectricity.com/services/security-awareness/elearning/): Short modules with progress tracking for the whole organisation.
- [Phishing Awareness](https://sectricity.com/services/security-awareness/phishing-awareness/): Structural approach to phishing, measured over time instead of one test per year.
- [TED Talk Style Keynote](https://sectricity.com/services/security-awareness/tedtalk/): A hacker on stage, for kick offs and company events.
- [For Employees](https://sectricity.com/services/security-awareness/employees/)
- [For Executives](https://sectricity.com/services/security-awareness/executive/)
- [For IT Professionals](https://sectricity.com/services/security-awareness/it-professionals/)
- [For Developers](https://sectricity.com/services/security-awareness/developers/)
- [For Finance Teams](https://sectricity.com/services/security-awareness/finance/)
- [For HR](https://sectricity.com/services/security-awareness/hr/)
- [For Sales](https://sectricity.com/services/security-awareness/sales/)

## Social Engineering

- [Social Engineering Assessments](https://sectricity.com/services/social-engineering/): Testing the human layer with realistic, authorised attacks.
- [Phishing Simulation](https://sectricity.com/services/social-engineering/phishing/): Targeted email attacks with measurable click and report rates.
- [Vishing](https://sectricity.com/services/social-engineering/vishing/): Voice phishing by phone, including deepfake voice scenarios.
- [Smishing](https://sectricity.com/services/social-engineering/smishing/): SMS based phishing against corporate and personal devices.
- [Mystery Guest](https://sectricity.com/services/social-engineering/mystery-guest/): Physical intrusion into offices, incognito and on site.
- [USB Drop Test](https://sectricity.com/services/social-engineering/usb-drop/): Dropped media test measuring what employees plug in.
- [CV Portal Test](https://sectricity.com/services/social-engineering/cv-portal/): Malicious applications and attachments through recruitment channels.
- [Executive Threat Analysis](https://sectricity.com/services/social-engineering/executive-threat-analysis/): Exposure of leadership through OSINT, data leaks and impersonation risk.

## Unique Products

- [Swishing, the Phishing Game](https://sectricity.com/services/swishing/): Gamified phishing awareness. Employees swipe left (phishing) or right (legitimate) on realistic emails in weekly sessions of five to ten minutes, with instant feedback, department leaderboards and a live admin dashboard. Multi-language, GDPR compliant, sessions logged for audit evidence under NIS2 Article 21(2)(g). Reported results: 94% engagement, 67% knowledge retention after 30 days, three times faster learning than annual e-learning, and a declining click rate after the first full training cycle. Used by Nationale Loterij.
- [Security Awareness Escape Truck](https://sectricity.com/services/escape-truck/): A mobile, hands on cybersecurity escape room brought to the client's own premises, for teams of four to eight and up to 80 participants per day, available across Western Europe. 95% engagement, lessons still recalled six months later, average participant rating 4.8 out of 5. Counts towards NIS2 Article 21 awareness obligations. Used by Voka across Flemish businesses.

## Consultancy and Compliance

- [Cybersecurity Consultancy](https://sectricity.com/services/consultancy/): NIS2, GDPR, ISO 27001 and DORA compliance audits and governance reviews.
- [NIS2 Compliance](https://sectricity.com/solutions/nis2-compliance/): Gap assessment, remediation roadmap and audit ready technical testing.
- [NIS2 Checker](https://sectricity.com/nis2-checker/): Free interactive tool to assess NIS2 readiness.
- [Free Security Scan](https://sectricity.com/free-security-scan/): Quick scan of exposed vulnerabilities in your systems and network.

## Solutions by Need

- [Ransomware Protection](https://sectricity.com/solutions/ransomware-protection/): Offensive testing to find exposure before ransomware actors do.
- [Cloud Security](https://sectricity.com/solutions/cloud-security/): Cloud infrastructure testing and configuration review.
- [Enterprise Security](https://sectricity.com/solutions/enterprise-security/): Strategic security partnership for large organisations.
- [SMB Security](https://sectricity.com/solutions/smb-security/): Right sized testing for mid market companies.
- [Startup Security](https://sectricity.com/solutions/startup-security/): Security that scales with growth.

## Solutions by Sector

- [Finance](https://sectricity.com/solutions/sector/finance/)
- [Healthcare](https://sectricity.com/solutions/sector/healthcare/)
- [Government](https://sectricity.com/solutions/sector/government/)
- [Automotive and Mobility](https://sectricity.com/solutions/sector/automotive-mobility/)
- [Retail and E-commerce](https://sectricity.com/solutions/sector/retail-ecommerce/)
- [HR Services and Staffing](https://sectricity.com/solutions/sector/hr-services-staffing/)

## Company

- [About Sectricity](https://sectricity.com/about/): Who we are, our values and our approach to ethical hacking.
- [Method and Ethics](https://sectricity.com/about/method-ethics/): How we work, our ethical framework, our AI assisted research framework and our disclosure policy.
- [Ethical Hackers at Work](https://sectricity.com/about/ethical-hackers/): The team behind the assessments.
- [Customers and References](https://sectricity.com/about/customers/): Over 500 assessments delivered, more than 12,000 vulnerabilities found, 100% human validated. Named references: Nationale Loterij (Swishing), TechWolf (AI systems pentest), Foodbag (web application pentest), Voka (Escape Truck), Ambassify (audit ready pentest) and Finc (phishing simulation).
- [Careers](https://sectricity.com/about/careers/): Open positions at Sectricity.
- [Responsible Disclosure](https://sectricity.com/responsible-disclosure/): How to report a vulnerability to us responsibly.

## Knowledge Base

- [Blog](https://sectricity.com/blog/): Security research, threat intelligence and practical guidance from our ethical hackers.
- [Cybersecurity Glossary](https://sectricity.com/glossary/): Plain language definitions of cybersecurity terms, from access control to zero trust.

## All Blog Articles

- [Agentic AI Supply Chain Security](https://sectricity.com/blog/agentic-ai-supply-chain-security/)
- [AI Agent Security: Test What Your Agents Can Reach](https://sectricity.com/blog/ai-agent-production-access/)
- [AI, NIS2, and the EU AI Act: the May 2026 Digital Omnibus](https://sectricity.com/blog/ai-cybersecurity-compliance-nis2-eu-ai-act/)
- [AI Attacks: Ethical Hacker Pentest Insights](https://sectricity.com/blog/ai-powered-attacks/)
- [AI Systems Pentesting: How to Test AI Security](https://sectricity.com/blog/ai-systems-penetration-testing/)
- [Am I Hacked? 10 Warning Signs and What to Do (2026)](https://sectricity.com/blog/am-i-hacked/)
- [Pentest vs. PTaaS: Comparing Costs & ROI](https://sectricity.com/blog/annual-pentest-or-ptaas/)
- [API Security Testing: Your Weakest Link](https://sectricity.com/blog/api-security-test/)
- [Cloud IAM Pentesting: Identity Misconfigurations](https://sectricity.com/blog/cloud-iam-pentesting/)
- [Cloud Security Assessment: What Gets Reviewed](https://sectricity.com/blog/cloud-security-assessment/)
- [Cyber Insurance 2026: What Insurers Require](https://sectricity.com/blog/cyber-insurance-what-insurers-require/)
- [Deepfake Vishing: A Voice Alone Isn't Proof](https://sectricity.com/blog/deepfake-vishing/)
- [EU AI Act after the 2026 Digital Omnibus Agreement](https://sectricity.com/blog/eu-ai-act-what-does-it-mean-for-your-security-and-compliance-in-2026/)
- [Gamified Phishing Simulations](https://sectricity.com/blog/gamified-phishing-simulation/)
- [Penetration Test Cost 2026: How Much Does a Pentest Cost?](https://sectricity.com/blog/how-much-does-a-pentest-cost/)
- [Stop Business Email Compromise (BEC)](https://sectricity.com/blog/how-to-prevent-business-email-compromise/)
- [How to Solve Phishing Structurally](https://sectricity.com/blog/how-to-solve-phishing-structurally/)
- [Incident Response: First 72 Hours After Attack](https://sectricity.com/blog/incident-response-plan-what-to-do/)
- [MCP Security: New Attack Chain on AI Tools](https://sectricity.com/blog/mcp-security/)
- [Grafana to 507 Meta Repos: A $157K Bug Chain](https://sectricity.com/blog/misconfigured-grafana-507-private-meta-repos/)
- [NIS2 Pentest Checklist: What Auditors Require](https://sectricity.com/blog/nis2-penetration-testing-checklist-what-your-auditor-really-wants-to-see-in-2026/)
- [EU Pentest Guide 2026: NIS2, DORA & AI Act](https://sectricity.com/blog/penetration-testing-eu-guide-2026/)
- [Pentest vs Vulnerability Scanning](https://sectricity.com/blog/penetration-testing-vs-vulnerability-scanning/)
- [Pentest Checklist: What to Include](https://sectricity.com/blog/pentest-checklist-what-should-you-include-in-a-pentest-engagement/)
- [Pentest Subsidies in Belgium: kmo-portefeuille and VLAIO](https://sectricity.com/blog/pentest-subsidies-belgium/)
- [Phishing Awareness: Reduce Risk for Your Team](https://sectricity.com/blog/phishing-awareness/)
- [Physical Pentesting: What Testers Find Inside Your Building](https://sectricity.com/blog/physical-penetration-testing/)
- [Prompt Injection Attacks: Risk & Defence](https://sectricity.com/blog/prompt-injection-explained/)
- [Red Teaming: When You Need It and Why](https://sectricity.com/blog/red-teaming-guide/)
- [Retest Included: Why a Pentest Needs a Retest](https://sectricity.com/blog/retest-included/)
- [Security Awareness: Beyond Annual Training](https://sectricity.com/blog/security-aware-culture/)
- [The Security Awareness Escape Room Experience](https://sectricity.com/blog/security-awareness-escape-room/)
- [Security Awareness Training: What Works 2026](https://sectricity.com/blog/security-awareness-training-guide/)
- [Shadow AI Discovery: Find Unapproved AI](https://sectricity.com/blog/shadow-ai-discovery/)
- [Social Engineering Assessment: What We Test](https://sectricity.com/blog/social-engineering-assessment-guide/)
- [Social Engineering in the Remote Work Era](https://sectricity.com/blog/social-engineering-in-the-remote-work-era/)
- [Understanding NIS2 for EU Organizations](https://sectricity.com/blog/understanding-nis2-what-european-organizations-need-to-know/)
- [Vibe-Coded App Security: Why AI-Built Apps Need a Pentest](https://sectricity.com/blog/vibe-coded-app-security/)
- [Web App Pentesting: What Gets Tested](https://sectricity.com/blog/web-application-penetration-testing/)
- [How Hackers Work: OSINT to Pentesting](https://sectricity.com/blog/what-does-a-hacker-really-do-from-osint-to-pentesting/)
- [What Is a Pentest (Penetration Test)? Explained](https://sectricity.com/blog/what-is-a-pentest/)
- [What is a Vulnerability Assessment? Scope and Limits](https://sectricity.com/blog/what-is-a-vulnerability-assessment/)
- [What is CEO Fraud? The Executive Impersonation Scam (2026)](https://sectricity.com/blog/what-is-ceo-fraud/)
- [What is Phishing? Types, Examples and Defence](https://sectricity.com/blog/what-is-phishing/)
- [What is Red Teaming in Cybersecurity? Beyond a Pentest](https://sectricity.com/blog/what-is-red-teaming-in-cybersecurity/)
- [What is Security Awareness? Examples, NIS2 and Training](https://sectricity.com/blog/what-is-security-awareness/)
- [What is Smishing? SMS Phishing Explained for Companies](https://sectricity.com/blog/what-is-smishing/)
- [What is Social Engineering? Meaning, Examples and Defence](https://sectricity.com/blog/what-is-social-engineering/)
- [What is Swishing? Gamified Phishing Awareness Explained](https://sectricity.com/blog/what-is-swishing/)
- [5 Benefits of Ethical Hacking for Companies](https://sectricity.com/blog/why-ethical-hacking/)
- [Zero Trust Security: What It Requires and How to Test It](https://sectricity.com/blog/zero-trust-security/)

## Optional

- [Escape Truck Campaign](https://sectricity.com/campaign/escape-truck/)
- [EU AI Act Campaign](https://sectricity.com/campaign/eu-ai-act/)
- [NIS2 Pentest Package](https://sectricity.com/campaign/nis2-pentest-pakket/)
- [Pentesting Campaign](https://sectricity.com/campaign/pentesting/)
- [Swishing Phishing Awareness Campaign](https://sectricity.com/campaign/phishing-awareness-swishing/)
- [Phishing Awareness Training Campaign](https://sectricity.com/campaign/phishing-awareness-training/)
- [Red Team Campaign](https://sectricity.com/campaign/red-team/)
- [Security Awareness Training Campaign](https://sectricity.com/campaign/security-awareness-training/)
- [Vishing and Social Engineering Campaign](https://sectricity.com/campaign/vishing-social-engineering/)
- [Terms and Conditions](https://sectricity.com/terms/)
- [Privacy Policy](https://sectricity.com/privacy/)
- [Cookie Policy](https://sectricity.com/cookie-policy/)

## Contact

- Website: https://sectricity.com/
- Email: info@sectricity.com
- Belgium: Gaversesteenweg 94, 9820 Merelbeke, +32 9 298 05 85
- Netherlands: +31 85 208 7871
- United Kingdom: 1 Coldbath Square, Farringdon, London EC1R 5HL, +44 7383 833041
- United States: +1 646 687 2163
- Contact form: https://sectricity.com/contact/
- Active in: Amsterdam, Antwerp, Breda, Brussels, Ghent, Hasselt, London, Rotterdam, Utrecht