Null Threat LabsNull Threat Labs

Winnipeg Penetration Testing & Cybersecurity Services

We find the gaps before the bad guys do.

Winnipeg-based cybersecurity consulting for Canadian SMBs, mid-market firms, and professional services. We identify what attackers will exploit and close it before it costs you revenue, clients, or compliance.

Schedule an Assessment View the EASE Offer
ease — target.example.ca

What we deliver

Three questions, answered with evidence.

01

Know What's Already Exposed

The recon and OSINT phase of a real external pentest, delivered on its own: DNS, email security, leaked credentials, shadow IT, and third-party exposure, mapped and explained. Zero exploitation, zero disruption.

See how EASE works →

02

See Where a Real Attacker Would Get In

External, internal, and full-scope penetration testing, web application and API testing, wireless assessments, and social engineering, run through a four-phase methodology: Assess, Exploit, Harden, Validate.

View penetration testing →

03

Pass Your Insurance Audit

Cyber insurance readiness that closes underwriting gaps before a denied claim does: MFA/EDR/PAM enforcement checks, backup immutability review, and incident response planning.

View cyber insurance readiness →

Flagship offering

External Attack Surface Evaluation

The reconnaissance and OSINT phase of an external penetration test, delivered as a focused, standalone engagement. Zero exploitation, zero disruption.

DNS and subdomain mapping, email security posture (DMARC/DKIM/SPF), leaked credential exposure, shadow IT discovery, third-party exposure, and employee intelligence, synthesized into a plain-language walkthrough of how an attacker would actually use it against you.

How EASE Works

See what's already exposed on the open internet, before an attacker finds it first. DNS, leaked or stolen staff passwords, shadow IT, and third-party risk, mapped continuously.

Schedule EASE
[+] zero exploitation
[+] zero disruption
[+] the same recon a full pentest starts with
> full findings summary, delivered in ~3 days

Why Null Threat Labs

Tested Like an Attacker, Not a Checklist.

Adversarial by Default

Every engagement is goal-driven and hands-on-keyboard, backed by proprietary AI-enabled tooling that covers more ground without cutting corners.

Embedded, End-to-End

One point of contact from scoping through retest. No hand-off between a sales team and a delivery team you've never spoken to.

Business-Risk Prioritized

Findings are ranked by what they actually expose: revenue, data, uptime. Not just CVSS score.

Scale-Appropriate

Scoped and priced for organizations that don't have an enterprise security budget, without cutting corners on methodology.

Certifications held by our team

OSCP certification badgeOSCPOSCP — Offensive Security Certified Professional
CPTS certification badgeCPTSCPTS — HackTheBox Certified Penetration Testing Specialist
CRTO certification badgeCRTOCRTO — Certified Red Team Operator
CRTL certification badgeCRTLCRTL — Certified Red Team Lead (Red Team Ops II)
CRTP certification badgeCRTPCRTP — Certified Red Team Professional
CompTIA Security+ certification badgeCompTIA Security+CompTIA Security+
CompTIA CySA+ certification badgeCompTIA CySA+CompTIA CySA+ — Cybersecurity Analyst
CompTIA SecAI+ certification badgeCompTIA SecAI+CompTIA SecAI+ — Security AI
Splunk CCDE certification badgeSplunk CCDESplunk Certified Cybersecurity Defense Engineer
MalDev certification badgeMalDevMalDev Academy — Malware Development
OSCP certification badgeOSCPOSCP — Offensive Security Certified Professional
CPTS certification badgeCPTSCPTS — HackTheBox Certified Penetration Testing Specialist
CRTO certification badgeCRTOCRTO — Certified Red Team Operator
CRTL certification badgeCRTLCRTL — Certified Red Team Lead (Red Team Ops II)
CRTP certification badgeCRTPCRTP — Certified Red Team Professional
CompTIA Security+ certification badgeCompTIA Security+CompTIA Security+
CompTIA CySA+ certification badgeCompTIA CySA+CompTIA CySA+ — Cybersecurity Analyst
CompTIA SecAI+ certification badgeCompTIA SecAI+CompTIA SecAI+ — Security AI
Splunk CCDE certification badgeSplunk CCDESplunk Certified Cybersecurity Defense Engineer
MalDev certification badgeMalDevMalDev Academy — Malware Development
OSCP certification badgeOSCPOSCP — Offensive Security Certified Professional
CPTS certification badgeCPTSCPTS — HackTheBox Certified Penetration Testing Specialist
CRTO certification badgeCRTOCRTO — Certified Red Team Operator
CRTL certification badgeCRTLCRTL — Certified Red Team Lead (Red Team Ops II)
CRTP certification badgeCRTPCRTP — Certified Red Team Professional
CompTIA Security+ certification badgeCompTIA Security+CompTIA Security+
CompTIA CySA+ certification badgeCompTIA CySA+CompTIA CySA+ — Cybersecurity Analyst
CompTIA SecAI+ certification badgeCompTIA SecAI+CompTIA SecAI+ — Security AI
Splunk CCDE certification badgeSplunk CCDESplunk Certified Cybersecurity Defense Engineer
MalDev certification badgeMalDevMalDev Academy — Malware Development
OSCP certification badgeOSCPOSCP — Offensive Security Certified Professional
CPTS certification badgeCPTSCPTS — HackTheBox Certified Penetration Testing Specialist
CRTO certification badgeCRTOCRTO — Certified Red Team Operator
CRTL certification badgeCRTLCRTL — Certified Red Team Lead (Red Team Ops II)
CRTP certification badgeCRTPCRTP — Certified Red Team Professional
CompTIA Security+ certification badgeCompTIA Security+CompTIA Security+
CompTIA CySA+ certification badgeCompTIA CySA+CompTIA CySA+ — Cybersecurity Analyst
CompTIA SecAI+ certification badgeCompTIA SecAI+CompTIA SecAI+ — Security AI
Splunk CCDE certification badgeSplunk CCDESplunk Certified Cybersecurity Defense Engineer
MalDev certification badgeMalDevMalDev Academy — Malware Development

Industries we serve

Testing scoped to your industry.

  • —Finance & Insurance
  • —Healthcare
  • —Legal
  • —Technology & SaaS
  • —Construction & Engineering
  • —Retail
  • —Education
  • —Manufacturing

Get in touch

Ready to see what's exposed?

Confidential intake. No obligation. Response within 24 hours.

Schedule an assessment Or email info@nullthreat.ca