# Pluto Cyber Security

> Manual-first penetration testing and cybersecurity for UK businesses. Engagements are scoped and authorised in writing, run by senior certified engineers, and closed out with audit-ready reporting and a free retest.

Pluto Cyber Security is a UK cybersecurity firm specialising in manual, engineer-led penetration testing. Every engagement is run by senior, certified operators (OSCP, CISSP, CISM, CEH and more), scoped up front at a fixed price, and closed out with a free retest once fixes ship. Testing is CREST-aligned and carried out only under an agreed scope with written authorisation.

## Engagement types
- Free security assessment: identification only. We map the external attack surface and report where you are exposed. Nothing is exploited and nothing is disrupted.
- Paid penetration testing: authorised, scoped exploitation to prove real impact, with evidence-backed findings and remediation guidance.

## Services
- [Offensive Security](https://plutosec.uk/services/offensive-security): Manual penetration testing across web, API, network, mobile and cloud.
- [Cloud & Infrastructure Security](https://plutosec.uk/services/cloud-infrastructure-security): Hardening and review of AWS, Azure, GCP and Microsoft 365.
- [Red Team Exercises](https://plutosec.uk/services/red-team-exercises): Adversary simulation and defensive drills under agreed rules of engagement.
- [Secure Application Development](https://plutosec.uk/services/secure-application-development): Code review, threat modelling and DevSecOps.
- [Vulnerability Management](https://plutosec.uk/services/vulnerability-management): Assessment, prioritisation and remediation.
- [Managed Detection & Response](https://plutosec.uk/services/managed-detection-and-response): 24/7 detection across endpoints, network and cloud.
- [Compliance & Risk Management](https://plutosec.uk/services/compliance-and-risk-management): SOC 2, ISO 27001, PCI DSS, Cyber Essentials and UK GDPR readiness.
- [All services](https://plutosec.uk/services): Full catalogue of 54 services across 7 domains.

## Key pages
- [Home](https://plutosec.uk/): Services, methodology and guarantees overview.
- [Industries](https://plutosec.uk/industries): Sector-specific testing (finance, banking, healthcare, government, retail & e-commerce, technology, education, utilities & energy, oil & gas).
- [Why Us](https://plutosec.uk/why-us): What sets Pluto Cyber Security apart.
- [Our Team](https://plutosec.uk/ourteam): Certified engineers and consultants.
- [Blog](https://plutosec.uk/blogs): Guidance on penetration testing, compliance and real-world threats.
- [Contact](https://plutosec.uk/contact): Request a free security assessment.

## Key facts
- Based in the United Kingdom; registered address 304 Ashfield Rd, Rochdale OL11 1QP, UK.
- Testing is manual and engineer-led, not automated scanning.
- Engagements are fixed-price and scoped before work begins.
- A retest after remediation is included at no extra cost.
- Reporting is structured as evidence for Cyber Essentials Plus, ISO 27001, SOC 2 and PCI DSS assessments.

## Contact
- Email: contact@plutosec.uk
- Phone: +44 7481 912177