Questions we get asked.

Leet Cyber Security is an offensive security and cyber readiness company. Since 2014, our ethical hackers have shown security teams how real adversaries would come at them, then trained alongside them until they are ready. That covers testing your defenses and your people, risk assessments, leadership preparation, year-round support and incident response.

See every service

Leet works with security leaders and executives at organizations large and small, across the country and around the world, especially where the stakes are highest. That includes K-12 school districts, colleges and universities, banks and financial services, and healthcare organizations.

See the sectors we serve

No. Leet does not sell hardware, software or remediation, so nothing we tell you is a sales pitch. You get an honest view of where you stand and a ranked list of fixes your team can realistically carry out, and we stay with you while you do.

About Leet

Tyler Wrightson founded Leet in 2014, after close to three decades in technical security. He is the author of Advanced Persistent Threat Hacking and Wireless Network Security: A Beginner's Guide, and speaks at conferences and events nationwide and around the world.

About Leet

A penetration test is a controlled, ethical attack on your organization. Our hackers work like a real adversary inside limits agreed with you, to find and prove which weaknesses an attacker could actually use. You get findings in plain language, ranked by business risk, with clear fixes, and we retest what you fixed.

Test your defenses

A vulnerability scan uses automated tools to list possible weaknesses. A penetration test has skilled people confirm by hand what an attacker could actually exploit, find the logic and access flaws scanners miss, and chain weaknesses together the way a real adversary would. You get confirmed problems instead of a long list of scanner noise.

External penetration testing

Test again whenever your environment changes, and consider testing all year rather than once. An annual test shows how you looked on one day, but attackers probe all year and most environments change every week. Year-round testing finds new attack paths as they open, before an attacker does.

HackerGuards year-round support

External penetration testing attacks everything you expose to the internet, the way an outside adversary would. Internal penetration testing starts as an attacker who is already inside, such as a stolen laptop, a phished employee or a rogue insider, and shows how far one foothold could spread toward your most valuable systems and data.

Internal penetration testingExternal penetration testing

A red team exercise is a realistic, goal-based attack that tests whether your team can detect and stop an advanced adversary. A penetration test shows where your defenses are weak. A red team exercise shows whether your people and tools would notice and stop an attacker in time, while we work toward agreed objectives.

Red team exercises

A purple team exercise puts our attackers and your defenders side by side. We run selected real attacker techniques, mapped to the MITRE ATT&CK framework (a public catalog of known attacker methods), and confirm together which ones your alerts and responses catch. Detections you would miss get tuned and confirmed while we are working with you.

Purple team exercises

Physical penetration testing checks whether someone could walk into your buildings and secure areas and reach your systems or data once inside. Through controlled, ethical intrusion, we test your locks, badges, surveillance, visitor handling, guards and staff, then give facilities and security teams practical fixes.

Physical penetration testing

Social engineering testing uses realistic attacks aimed at your people instead of your technology. We send phishing emails, make vishing (voice phishing) phone calls and send smishing text messages to see how staff handle urgent or manipulative requests, and whether your reporting and response process works.

Social engineering

A phishing test measures how many people clicked, replied, shared information or reported the attempt. It also shows which teams and processes are most at risk and whether your reporting process worked. Run every quarter, it shows whether your people are actually improving, not just completing training.

Social engineering

A comprehensive security assessment is a complete security checkup across your internal, external, wireless and physical environments in one engagement. It shows how a hacker could break in and what would happen next, and gives you one prioritized plan to fix it that your board and technical team can both use.

Comprehensive security assessment

An organizational risk assessment looks inward: it maps your key business functions and the risks most likely to disrupt them, so security spending follows what your business values. A threat assessment looks outward: it identifies the attackers targeting your sector and how their methods apply to your organization.

Organizational risk assessmentThreat assessment

A tabletop exercise is an interactive workshop where your team walks through a realistic incident, step by step. Your teams work through the technical, procedural and communication decisions, so gaps in roles and coordination show up in practice instead of during a real crisis.

Tabletop exercises

Because a plan that has never been tested is still a guess. In a real incident there is no time to figure out who decides what. A tabletop exercise lets your leadership rehearse together when the stakes are low, and gives you clear actions to strengthen the plan.

Tabletop exercises

Call Leet at 844-533-8797. Our incident response team will help you contain the attack, recover your operations and investigate how the attacker got in and what they reached. You can also set up a retainer ahead of time, so you know exactly how to reach us and how fast we will respond.

Incident response

Executive protection finds what attackers can learn about your leaders from public sources, and helps you reduce it. We use open source intelligence (OSINT), the same public research methods attackers use, so your executives become harder to target, impersonate or pressure, at work and at home.

Executive protection

Often more than leaders expect: personal details, family information and other online exposure. Attackers use it for targeted phishing, impersonation, fraud and even physical threats. An executive protection review shows what is out there, which exposures are most likely to be used against you, and practical steps to reduce them.

Executive protection

Book a scoping call. We talk through what worries you and what is worth testing, then recommend where to start. Together we agree on what is in bounds, what matters most to your business and how we stay safe while testing.

Book a scoping call

We walk you through the results. You get findings in plain language, ranked by business risk, with clear fixes your team can carry out. If we find something serious during testing, we call you right away instead of waiting for the report. Then we retest what you fixed, so you know the problem is truly solved.

See every service

Yes. With HackerGuards, our ethical hackers become the offensive side of your team all year, for less than one full-time hire. It can combine continuous testing, quarterly social engineering, red and purple team rounds, tabletop exercises, ongoing advisory and board reporting, depending on what you need.

HackerGuards year-round support

Yes. Board and executive reporting turns technical findings into clear, plain-language summaries of where you stand, what matters and what you are doing about it. Your board gets the business impact behind the findings and clear priorities, instead of a hundred-page report, and can see improvement over time.

Board and executive reporting