Proof
24 stories
6 published in full on this site
Envenox is a software development firm. We ship production systems — custom software, web applications, ERP and the platforms underneath them — and we keep an offensive security practice on staff that attacks what we build before anyone else gets the chance.
Selected clients
- Northgate Freight
- Lumen Clinical
- Verity Payments
- Aldercross Group
- Mereway Housing
- Hallstead Retail
- Carrick Analytics
- Pelham Energy
- Severn Mutual
- Orbis Education
Filter the work
Service
1 story matching Service: Incident Response · Engagement type: Retainer
Clear all filtersFreight and customs broker, 1,200 employees
Under NDAOnboarding found that 31% of configured log sources had never delivered an event — before a single detection was written.
31%
of configured log sources were silently not arriving
In their words
The report arrived with the fix already written the way our engineers would have written it. That has not happened before and it removed about three weeks of translation.
Head of Platform Security
Enterprise payments provider
They told us to buy less than we asked for. We asked for a red team and they said buy two penetration tests first and come back. We did, and they were right.
Information Security Manager
Freight and customs broker
Four months after handover we have shipped eleven releases without calling them once. That is the outcome I was buying and almost nobody sells it.
Chief Technology Officer
Clinical workflow vendor
The discovery phase ended with a document that told us not to build two of the four things we had asked for. We paid for that document and it saved us a year.
Operations Director
Precision components manufacturer
Having the testers and the engineers in one firm sounded like a conflict of interest until I watched a finding go from confirmed to deployed in four days.
VP Engineering
B2B SaaS platform
Scroll the row, or use the arrow keys once it has focus.
Get started
Book a 60-minute scoping call
A technical conversation with the person who would lead the work — not a qualification script, not a discovery deck. You come away with a written scope, the exclusions stated in the body rather than in an appendix, and a day count that we have not padded.
A named engineer replies within one business day. Scoping call within three.
Claire Benoit
Practice Director, Governance & Risk
Marcus Reid
Head of Engineering
Amara Nwosu
Chief Operating Officer