Skip to content
Shadow Security
HACK ME · A Shadow Security campaign

We hack you. Legally. For free.

A real attacker is already looking. HACK ME is a full black-box security test: with your authorisation, we try to break into your company the way they would, before they do.

Hack meHow it works
The termsHACK ME
Test
Full black boxExactly like a real attacker
Access
NoneNo passwords, no inside help
Rules
Set by youScope, timing and what is off-limits
Findings
Reported privatelyNothing goes public until it is fixed
Cost
NothingZero cost, ever
  • Legal
  • Authorised
  • Zero cost
How it works

No inside help. Exactly like a real attacker.

We get no head start. If we can get in, so can someone who will not tell you about it.

  1. Full black box

    No passwords, no inside access, no shortcuts. We start from exactly what an outsider can see.

  2. Exactly like a real attacker

    We come in the way a real attacker would, and find what they would find.

  3. Reported privately

    Every issue we find comes straight to you. Nothing is made public while it is still open.

  4. You fix it

    Only once it is fixed do we turn the engagement into one video for our audience.

Rules of engagement

You stay in control.

You choose the scope and you set the rules before anything starts. We stay inside them.

Engagement rules · set by you
  • Which systems are in scope
  • When we test
  • What is off-limits
The deal

You lose nothing.

There is no cost, ever. All we ask is one video.

  • All we askLet us turn the engagement into one video for our audience.
  • WhenPublished only after you have fixed what we found. Never before.
  • Your nameIf you want, your brand stays hidden.
Why say yes?

Find your gaps early. Build real trust. Pay nothing.

  • Secure early

    Before a breach

    Find your gaps while finding them is cheap, not after someone else already has.

  • Build trust

    Proven in public

    A fixed finding, shown openly, says more about how you handle security than a policy page.

  • Zero cost

    Nothing to lose

    There is no cost, ever. The only thing we ask for is the video, after you have fixed it.

Questions

Before you say yes.

What is HACK ME?
HACK ME is a campaign by Shadow Security. With your authorisation, we try to break into your company the way a real attacker would, as a full black-box test, before a real attacker does. It is legal, it is on rules you set, and it costs nothing.
Is it really free?
Yes. There is no cost, ever. All we ask is that you let us turn the engagement into one video for our audience, published only after you have fixed what we found.
Is it legal?
Yes. Nothing is tested without your authorisation, and we stay inside the rules of engagement you set: which systems are in scope, when we test, and what is off-limits.
What do you need from us?
Your authorisation and your rules of engagement. It is a full black-box test, so we do not ask for passwords, inside access or shortcuts.
What happens when you find something?
It is reported to you privately. Nothing about it is published until you have fixed it.
Will our company be named in the video?
Only if you want it to be. If you prefer, your brand stays hidden.
How do we start?
Email info@shadowsecurity.in with the subject HACK ME and tell us about your company.

Legal. Free. Black box. On your terms.

info@shadowsecurity.in