Let's find your gaps
before someone else does.
Book a demo, request a free exposure snapshot or scope an engagement. A security specialist (not a sales bot) will reply within one business day.
Message sent
Thanks for reaching out. A security specialist will reply within one business day.
Back to homeBook a demo
30 minutes, on a domain you own. Passive and zero-touch.
Under attack right now?
Choose “Get help with an active incident” and mark the subject URGENT. Our response team prioritises these.
Responsible disclosure
Found a vulnerability in GapSecure? Send us the details through this form and we'll respond promptly.
Questions we hear a lot.
What is attack surface management?
Attack surface management (ASM) continuously discovers, inventories and assesses everything your organisation exposes to the internet, including domains, IPs, services, applications and cloud resources, so you can find and fix weaknesses before attackers do. GapSecure ASM adds exploitation intelligence, ATT&CK mapping and compliance evidence on top.
Will a GapSecure scan disrupt my production systems?
You choose the depth. Passive discovery sends no traffic to your targets at all. Balanced and safe modes observe and fingerprint without sending attack payloads. Active testing that sends payloads only runs when you explicitly enable it, against targets you are authorised to test.
Can I host the platform myself?
Yes. GapSecure ASM runs as a containerised stack and can be deployed on your own infrastructure with a single command, or used as a managed cloud service.
How is a red team different from a penetration test?
A penetration test aims to find as many vulnerabilities as possible in a defined scope. A red team engagement pursues specific objectives, like reaching a sensitive system, using any realistic path, and measures how well your people and tools detect and respond.
Do you retest after we fix findings?
Yes. Retesting of remediated findings is included with our VAPT engagements, and platform customers can re-run assessments at any time to verify fixes.
Does a high compliance score in the platform mean we're certified?
No. The platform scores the controls an external assessment can observe. Governance, policy, physical and process controls need a full audit, which our Compliance Audits team can deliver.