BR-TOOL-01
LIVE
PUBLIC TOOL
Breachroad web security scanner
A non-invasive assessment of externally visible web, DNS, mail, privacy and configuration signals. It produces a shareable report, PDF and JSON output.
PUBLIC EVIDENCE / RESEARCH
Public work and research
Public tools, the Academy, a complete report sample and technical research you can inspect before a sales conversation.
PUBLIC EVIDENCE INDEX VERIFIABLE MATERIAL ONLY
- ProductsScanner and Pentester Path
- ReportComplete delivery-standard sample
- ResearchOriginal analysis with sources
TOOLS / ACADEMY / REPORTS / RESEARCH
01 / PUBLIC EVIDENCE
Work that exists outside a sales deck
BR-ACADEMY-01
LIVE
PUBLIC LEARNING PLATFORM
Breachroad Academy — Pentester Path
We designed and built a bilingual path from zero to solid penetration-testing foundations. It covers Kali Linux, authorisation, systems and networks, OSINT, Nmap, service footprinting, web reconnaissance, evidence and reporting. Each module ends with a practical assessment; the account keeps progress, quiz results, XP and rank.
- 19
- modules
- 207
- lessons
- ~234h
- of material
- PL / EN
- bilingual
FREEPRACTICAL LABSQUIZZES + PROGRESS
BR-REPORT-01
PUBLIC
REPORT SYSTEM
Full penetration test report sample
A realistic, clearly labelled demonstration with executive risk, scope, attack path, CVSS vectors, sanitised evidence, remediation and retest criteria.
BR-RESEARCH-01
UPDATED
RESEARCH LIBRARY
223 English technical analyses
Long-form material on application, cloud, identity and AI security. Articles include primary sources, concrete defensive guidance and a named technical author.
02 / DISCLOSURE STANDARD
Confidential by default. Public only by permission.
Security work contains architecture, weaknesses and operational context that should not become marketing material by default. We publish an engagement only after written client approval and remove details that could increase risk.
01 / DEMONSTRATION
A realistic example built without client data. Always labelled as a model or sample.
02 / RESEARCH
Author, publication date, primary sources and a clear distinction between fact and inference.
03 / CLIENT CASE STUDY
Only after approval, with a real sector, scope, method and result. No anonymous logo walls or invented metrics.
03 / ENGAGEMENT PATTERNS
What the work looks like in practice
APP-01
Application and API attack path
Role and tenant mapping → business-logic testing → controlled evidence → developer walkthrough → retest.
View service
ID-01
Hybrid identity attack path
AD and Entra relationships → privilege paths → safe validation → hardening sequence → detection coverage.
View service
AI-01
Agent trust-boundary assessment
Threat model → adversarial evaluation set → tool and data abuse → impact evidence → regression tests.
View service
04 / SELECTED RESEARCH
Technical depth, not news volume
AI SECURITY01
AI red teaming for LLMs, RAG and agents
Scoping, impact-based findings, evaluation design and the difference between a jailbreak and a security failure.
Read analysis
CLOUD / IAM02
AWS IAM privilege escalation testing
A safe method for reasoning about effective policies, PassRole, trust relationships and CloudTrail evidence.
Read analysis
IDENTITY03
Kerberos delegation and RBCD testing
A defensive model for S4U, delegation, ACLs, service tickets and controlled validation in Active Directory.
Read analysis
Current status
Client case studies are intentionally not fabricated.
The foundation is ready for approved case studies. When a client permits publication, the record will include the challenge, verified scope, method, result, timeline and quote. Until then, the page shows only public Breachroad work and clearly labelled models.
BR / NEXT STEP
Want to see the reporting standard on your own scope?
Tell us what must be tested. We will define the rules, evidence model and deliverables before the engagement starts.
NDA · clear scope · direct communication