Compass Security Blog - Offensive Defense

Red Teaming engagements are “realistic” attack simulations designed to test the security posture of an organization and its Blue Team. This term is…

TLDR: Scan GitLab job logs for credentials using https://github.com/CompassSecurity/pipeleak Many organizations use (self-hosted) GitLab instances to…

At Compass Security, we are proud to offer a fully managed bug bounty program tailored to the needs of both SMEs and larger enterprises. From scoping…

During Business Email Comproise (BEC) engagements we often have to analyze the provenance of emails. According to the FBI's Internet Crime Report, BEC…

Given the explosion of development and interest in deep learning models in the past year, we decided to research on the topic to increase our know-how…