access_granted |

We find the holes
before attackers do.

sudo is a New Zealand cyber security firm delivering penetration testing, security audits, managed detection & response, and hands-on training for organisations that can't afford to guess.

client@network:~$ ./run_assessment.sh --target client-network
-bash: permission denied
client@network:~$ sudo ./run_assessment.sh --target client-network
[sudo] password for client: ********
[+] enumerating attack surface...
[+] 214 hosts discovered
[!] 3 critical vulnerabilities found
[+] exploiting CVE-2024-XXXX... success
[+] generating remediation report
client@network:~$ _
15+
years of experience
200+
engagements delivered
24/7
monitoring & response
NZ
owned & operated
services

Full-spectrum security, one team

From offensive testing to round-the-clock monitoring, we cover the full lifecycle of your security programme.

>_

Penetration Testing

Web, mobile, network, and cloud testing that simulates real attackers — not just a scanner report.

  • External & internal network
  • Web & mobile application
  • Cloud configuration review
  • Social engineering
[ ✓ ]

Audits & Compliance

Independent audits mapped to the frameworks that matter to your regulators, insurers, and customers.

  • ISO 27001 readiness
  • NZISM & Privacy Act
  • PCI DSS gap analysis
  • Risk & policy review

Managed Security (SOC)

24/7 detection and response backed by analysts who actually pick up the phone. SIEM experts with years of hands-on experience.

  • Managed detection & response
  • Incident response retainer
  • SIEM deployment & tuning
  • Log monitoring & alerting
  • Threat intelligence

Security Consulting

Fractional CISO support and strategic advice to build a security programme that scales with you.

  • Virtual CISO
  • Architecture review
  • Vendor & third-party risk
  • Board reporting
#

Training & Awareness

Practical training that turns your staff into your first line of defence, not your weakest link.

  • Phishing simulations
  • Security awareness workshops
  • Secure coding training
  • Executive tabletop exercises

Incident Response

When it's already happening, we help you contain it, understand it, and recover fast.

  • Breach investigation
  • Containment & eradication
  • Forensics & reporting
  • Post-incident hardening
process

How an engagement runs

Scope

We define targets, rules of engagement, and success criteria together — no surprises.

Test

Our team probes, exploits, and documents findings the way a real adversary would.

Report

Clear, prioritised findings with proof-of-concept detail and practical remediation steps.

Retest

We verify fixes and hand you a clean bill of health you can show stakeholders.

trusted by

Working with NZ businesses that take security seriously

FINANCE HEALTHCARE LOGISTICS GOVERNMENT RETAIL & ECOMMERCE SAAS
get started

Ready to see what an attacker sees?

Book a no-obligation scoping call and we'll put together a proposal within 48 hours.

Request an assessment