Null Threat LabsNull Threat Labs

Winnipeg Penetration Testing & Cybersecurity Services

We find the gaps before the bad guys do.

Winnipeg-based cybersecurity consulting for Canadian SMBs, mid-market firms, and professional services. We identify what attackers will exploit and close it before it costs you revenue, clients, or compliance.

Schedule an Assessment View the EASE Offer
ease — target.example.ca

What we deliver

Three questions, answered with evidence.

01

Know What's Already Exposed

Continuous external attack surface evaluation: DNS and subdomains, email security posture, leaked credentials, shadow IT, and third-party exposure. Zero exploitation, zero disruption.

See how EASE works →

02

See Where a Real Attacker Would Get In

External, internal, and full-scope penetration testing, web application and API testing, wireless assessments, and social engineering, run through a four-phase methodology: Assess, Exploit, Harden, Validate.

View penetration testing →

03

Pass Your Insurance Audit

Cyber insurance readiness that closes underwriting gaps before a denied claim does: MFA/EDR/PAM enforcement checks, backup immutability review, and incident response planning.

View cyber insurance readiness →

Flagship offering

External Attack Surface Evaluation

The reconnaissance phase of an external penetration test, without the active exploitation. Continuous discovery, zero disruption.

DNS and subdomain mapping, email security posture (DMARC/DKIM/SPF), leaked credential monitoring, shadow IT discovery, third-party exposure, and employee intelligence. This runs as an ongoing service, not a one-time scan.

How EASE Works

Currently offering 5 fully-subsidized EASE assessments for local Winnipeg and Manitoba businesses: a no-cost look at what's already exposed on the open internet.

Claim an Assessment
[+] zero exploitation
[+] zero disruption
[+] continuous discovery
> no-cost engagement, delivered in ~5 days

Why Null Threat Labs

Tested Like an Attacker, Not a Checklist.

Adversarial by Default

Every engagement is goal-driven and hands-on-keyboard, backed by proprietary AI-enabled tooling that covers more ground without cutting corners.

Embedded, End-to-End

One point of contact from scoping through retest. No hand-off between a sales team and a delivery team you've never spoken to.

Business-Risk Prioritized

Findings are ranked by what they actually expose: revenue, data, uptime. Not just CVSS score.

Scale-Appropriate

Scoped and priced for organizations that don't have an enterprise security budget, without cutting corners on methodology.

Certifications held by our team

OSCP certification badgeOSCPOSCP — Offensive Security Certified Professional
CPTS certification badgeCPTSCPTS — HackTheBox Certified Penetration Testing Specialist
CRTO certification badgeCRTOCRTO — Certified Red Team Operator
CRTL certification badgeCRTLCRTL — Certified Red Team Lead (Red Team Ops II)
CRTP certification badgeCRTPCRTP — Certified Red Team Professional
CompTIA Security+ certification badgeCompTIA Security+CompTIA Security+
CompTIA CySA+ certification badgeCompTIA CySA+CompTIA CySA+ — Cybersecurity Analyst
CompTIA SecAI+ certification badgeCompTIA SecAI+CompTIA SecAI+ — Security AI
Splunk CCDE certification badgeSplunk CCDESplunk Certified Cybersecurity Defense Engineer
MalDev certification badgeMalDevMalDev Academy — Malware Development
OSCP certification badgeOSCPOSCP — Offensive Security Certified Professional
CPTS certification badgeCPTSCPTS — HackTheBox Certified Penetration Testing Specialist
CRTO certification badgeCRTOCRTO — Certified Red Team Operator
CRTL certification badgeCRTLCRTL — Certified Red Team Lead (Red Team Ops II)
CRTP certification badgeCRTPCRTP — Certified Red Team Professional
CompTIA Security+ certification badgeCompTIA Security+CompTIA Security+
CompTIA CySA+ certification badgeCompTIA CySA+CompTIA CySA+ — Cybersecurity Analyst
CompTIA SecAI+ certification badgeCompTIA SecAI+CompTIA SecAI+ — Security AI
Splunk CCDE certification badgeSplunk CCDESplunk Certified Cybersecurity Defense Engineer
MalDev certification badgeMalDevMalDev Academy — Malware Development
OSCP certification badgeOSCPOSCP — Offensive Security Certified Professional
CPTS certification badgeCPTSCPTS — HackTheBox Certified Penetration Testing Specialist
CRTO certification badgeCRTOCRTO — Certified Red Team Operator
CRTL certification badgeCRTLCRTL — Certified Red Team Lead (Red Team Ops II)
CRTP certification badgeCRTPCRTP — Certified Red Team Professional
CompTIA Security+ certification badgeCompTIA Security+CompTIA Security+
CompTIA CySA+ certification badgeCompTIA CySA+CompTIA CySA+ — Cybersecurity Analyst
CompTIA SecAI+ certification badgeCompTIA SecAI+CompTIA SecAI+ — Security AI
Splunk CCDE certification badgeSplunk CCDESplunk Certified Cybersecurity Defense Engineer
MalDev certification badgeMalDevMalDev Academy — Malware Development
OSCP certification badgeOSCPOSCP — Offensive Security Certified Professional
CPTS certification badgeCPTSCPTS — HackTheBox Certified Penetration Testing Specialist
CRTO certification badgeCRTOCRTO — Certified Red Team Operator
CRTL certification badgeCRTLCRTL — Certified Red Team Lead (Red Team Ops II)
CRTP certification badgeCRTPCRTP — Certified Red Team Professional
CompTIA Security+ certification badgeCompTIA Security+CompTIA Security+
CompTIA CySA+ certification badgeCompTIA CySA+CompTIA CySA+ — Cybersecurity Analyst
CompTIA SecAI+ certification badgeCompTIA SecAI+CompTIA SecAI+ — Security AI
Splunk CCDE certification badgeSplunk CCDESplunk Certified Cybersecurity Defense Engineer
MalDev certification badgeMalDevMalDev Academy — Malware Development

Industries we serve

Testing scoped to your industry.

  • —Finance & Insurance
  • —Healthcare
  • —Legal
  • —Technology & SaaS
  • —Construction & Engineering
  • —Retail
  • —Education
  • —Manufacturing

Get in touch

Ready to see what's exposed?

Confidential intake. No obligation. Response within 24 hours.

Schedule an assessment Or email info@nullthreat.ca