About
Practical security for the software businesses depend on
Cyber Secret Society helps businesses identify security weaknesses, assess application risk, and build more secure digital products through practical security testing and remediation guidance.
Who we are
Cyber Secret Society is a founder-led cybersecurity company. We focus on the security of applications, APIs, and source code — the places where most modern businesses hold their data and their risk. We work remotely with clients internationally.
Being founder-led means you deal directly with the people doing the work. We keep our services focused on what we do well, scope every engagement carefully, and tell you plainly when something is outside what we offer.
Alongside client work, Cyber Secret Society runs a learning community: free articles, reference material, learning paths, and capture-the-flag challenges for people building practical security skills.
Authorised testing only
We only test systems with written authorization from someone entitled to give it, within an agreed scope and rules of engagement. We do not test systems speculatively or without permission — and our learning content teaches the same rule.
Responsible disclosure
If you believe you've found a security issue in this website, please email admin@cybersecretsociety.com with a description, without including sensitive data. Please don't access data beyond what's needed to demonstrate the issue, disrupt the service, or disclose it publicly before we've had a reasonable chance to respond.
The community
Our community shares practical security knowledge through articles, learning paths, and CTF challenges run in safe, purpose-built environments.
Visit the community
Follow our work
Security knowledge, research, and community updates on our official channels.
Planning a security assessment?
Tell us about your application, API, or software security requirements. We can discuss the appropriate scope and next steps.
What happens next
- 01We review your enquiry and reply by email
- 02An initial discussion about your application and goals
- 03A written scope — nothing is tested until it's agreed