# Secure Ideas

> Secure Ideas is a CREST-accredited penetration testing and information security consulting firm based in Jacksonville, Florida, known by its Professionally Evil brand. Engagements are delivered by experienced consultants using a manual, methodology-driven approach.

Services span network, web application, API, mobile, and physical penetration testing, along with security consulting, assessments, vulnerability management, and training. Secure Ideas is a CREST AI Charter signatory. For scoping or a quote, organizations are directed to the contact page.

## Services

- [Penetration Testing](https://www.secureideas.com/penetration-test): Overview of penetration testing services across networks, applications, APIs, mobile, and physical environments.
- [Web Application Penetration Testing](https://www.secureideas.com/web-application-penetration-testing): In-depth manual testing of web applications to identify vulnerabilities.
- [API and Mobile App Penetration Testing](https://www.secureideas.com/api-and-mobile-app-penetration-testing): Risk-based testing of API and mobile application architecture, implementation, and controls.
- [Continuous Penetration Testing](https://www.secureideas.com/continuous-penetration-testing): Ongoing testing that fits earlier into the software development lifecycle.
- [Physical Penetration Testing](https://www.secureideas.com/physical-penetration-testing): Assessment of physical controls using techniques such as social engineering, RFID cloning, and lock bypass.
- [Consulting and Advisory Services](https://www.secureideas.com/consulting-advisory): Strategic and technical security consulting and advice.
- [Expert Witness Services](https://www.secureideas.com/expert-witness-services): Expert analysis and testimony for legal matters.
- [Security Assessments](https://www.secureideas.com/security-assessment): Targeted assessments of systems, applications, and controls.
- [PCI DSS Security (QSA)](https://www.secureideas.com/pci-qsa): Professionally Evil Practically Secure, the Secure Ideas PCI practice led by Jeff Man, providing QSA-led PCI DSS Security assessments.
- [Vulnerability Management](https://www.secureideas.com/vulnerability-management): Identifying and prioritizing vulnerabilities over time.
- [Training](https://www.secureideas.com/training): Information security and penetration testing courses.
- [CISSP Mentorship Program](https://www.secureideas.com/cissp-class): Pay-what-you-can CISSP exam preparation program.

## Products

- [Professionally Evil Testing as a Service (PETaaS)](https://www.secureideas.com/professionally-evil-testing-as-a-service): Subscription model combining advisory services, continuous penetration testing, and flexible test credits.
- [Threat Exposure Management](https://www.secureideas.com/dark-web-monitoring): Monitoring for exposed credentials and external threat indicators.
- [CloudScout](https://www.secureideas.com/cloudscout): Cloud-focused offering in the Scout product line.
- [NetworkScout](https://www.secureideas.com/networkscout): Network-focused offering in the Scout product line.
- [WebScout](https://www.secureideas.com/webscout): Web-focused offering in the Scout product line.

## Resources

- [Knowledge Center (FAQ)](https://www.secureideas.com/knowledge): Answers to common questions on penetration testing, scoping, and cost.
- [Blog](https://www.secureideas.com/blog): Technical articles and research from the Secure Ideas team.
- [What is Penetration Testing](https://www.secureideas.com/what-is-penetration-testing): Primer on penetration testing concepts and engagement types.
- [Penetration Testing Methodology](https://www.secureideas.com/knowledge/secure-ideas-penetration-testing-methodology): Detailed explanation of the four-step testing methodology, with a downloadable copy.
- [Pricing](https://www.secureideas.com/knowledge/how-much-does-a-penetration-test-cost): How a penetration test is scoped and priced.
- [Webcasts](https://www.secureideas.com/webcast): Recorded and upcoming webcast sessions.
- [Podcasts](https://www.secureideas.com/podcasts): Secure Ideas podcast content.
- [Events](https://www.secureideas.com/events): Conferences and events where Secure Ideas appears.

## Optional

- [Our Team](https://www.secureideas.com/our-team): The consultants and staff behind Secure Ideas.
- [Contact Us](https://www.secureideas.com/contact): Start a conversation or request a quote.
- [Partner Program](https://www.secureideas.com/partner-program): Information for referral and channel partners.
- [Newsletter Sign-up](https://www.secureideas.com/newsletter): Subscribe to Secure Ideas updates.
- [Client Portal](https://portal.secureideas.com/): Secure access for active clients.
- [Privacy Policy](https://www.secureideas.com/privacy-policy): How Secure Ideas handles data and privacy.