O

Onyx Offensive

Onyx Offensive — Red Team Security & Exploitation

Specialized penetration testing for high-profile assets. We provide discrete vulnerability research, offensive security assessments, and proactive threat modeling for VIPs, executives, and elite organizations. Harden your digital infrastructure with professional-grade exploit analysis and Red Team tactics.

Services: Penetration testing • Vulnerability research • Infrastructure audits • Red Team operations • Asset protection

Confidential. Precise. Offensive.

Wraith-20 Advanced Penetration Test Scoping

Advanced Penetration Test: Scoping & Strategy Consultation

This meeting is required for all high-value engagements that involve active attack simulation against your live financial systems.

What is Included (Scope - Full Attack Simulation):

  • Active Testing & Exploitation (Phases 11-20): Includes live attack simulations (e.g., fuzzing, XSS, RCE), full privilege escalation, data exfiltration testing, and post-exploitation assessment.
  • Custom Scoping: We will define the exact scope (IPs, applications, network layers), required duration (weeks), and agree on the Rules of Engagement (ROE) to minimize business disruption.
  • Deliverable: A formal Statement of Work (SOW) and Master Service Agreement (MSA) required for the project kickoff.

Purpose: To define the legal and technical scope necessary to proceed with a full-scope, comprehensive system penetration test.

  • 45m
  • 1

Wraith-20 Penetration Scanner 45 Min Meeting

Full 20-Phase Discovery Report & Vulnerability Analysis (Fixed Price)

This service delivers a comprehensive, non-exploitative security report covering all 20 phases of our reconnaissance process, excluding active testing/exploitation.

What is Included (Scope - Deep Reconnaissance):

  • Full Digital Footprint Mapping (Phases 1-10): Exhaustive scanning of subdomains, ports, services, and cloud assets.
  • Vulnerability Analysis (Phases 11-20): Advanced analysis of known vulnerabilities, session management flaws, and encryption weaknesses—without attempting to exploit them.
  • Deliverable: Actionable remediation roadmap with business impact analysis and an executive consultation to review findings and prioritize compliance efforts.

Purpose: Ideal for pre-audit preparation and gaining a total picture of external risk exposure at a fixed, cost-effective price.

  • 45m
  • 1

Continuous Threat Management CTEM Consultation

This consultation focuses on transitioning your security strategy from reactive "snapshots" (annual penetration tests) to Always-On Threat Exposure Management. CTEM is a systematic, 24/7 approach that continuously identifies, analyzes, and prioritizes emerging vulnerabilities, exploits, and shadow IT across your entire attack surface.

Goal of the Meeting: To design an Onyx Offensive CTEM program that ensures continuous, validated visibility, allowing you to fix critical risks before they are exploited.

  • 40m
  • 1

COBOL Starter One Time Assessment

Starter

$25,000

One-time assessment

  • ✓ Up to 50K lines of code
  • ✓ Full vulnerability report
  • ✓ Executive summary

✓ 30-day support

  • 45m
  • 1

COBOL Enterprise COBOL Complete Security Platform

Enterprise

$500,000/yr

Complete security platform

  • ✓ Unlimited lines of code
  • ✓ Real-time scanning
  • ✓ Dedicated engineer
  • ✓ 24/7 support

✓ Custom integration

  • 45m
  • 1

COBOL Professional Continuous Monitoring

Professional

$150,000/yr

Continuous monitoring

  • ✓ Up to 250K lines of code
  • ✓ Quarterly scans
  • ✓ Compliance mapping
  • ✓ 24hr SLA support

✓ CI/CD integration

  • 45m
  • 1

NGO Wraith-20 Scanner Consultation

What we’re offering:

  • Wraith-20 External Surface Scan: A comprehensive look at what an attacker sees from the outside.
  • Vulnerability Briefing: A plain-English report on your high-risk gaps.
  • Hardening Roadmap: Actionable steps to lock down your infrastructure against modern threats.
  • 25m
  • 1
Onyx Offensive | Cal.com