SECURITY TESTING
Penetration Testing
Understand real-world exposure through scoped, authorised testing and practical findings.
Explore testingDEFENCE · MARITIME · CRITICAL SYSTEMS
Practical Cyber Assurance
for Complex Environments
Helping organisations build confidence, resilience and trust through independent cyber assurance, security reviews and risk-led advice.
Our servicesOperational experience. Clear findings. Practical action.
SECURE BY DESIGN
Security Architecture
& Threat Modelling
Threat-informed analysis for connected products and complex systems.
Explore our servicesEVIDENCE & OVERSIGHT
Assurance & Audit Readiness
Independent reviews, clear evidence and actionable improvement plans.
Explore assuranceTECHNICAL CONFIDENCE
Vulnerability Assessment
& Secure Configuration
Identify and prioritise technical risks across infrastructure, platforms and products.
Explore technical reviews01 Know your exposure
02 Test the evidence
03 Prioritise action
WHERE WE WORK
Security has to work
in the real world.
The right assurance considers your people, dependencies and operating constraints—not just the policy on the page.
01 / MARITIME
Vessels & ports
Confidence for commercial ships, workboats and ports across connected operations, from onboard systems to shore services and third-party access.
- Asset ownership and vessel-to-shore dependencies
- Supplier remote access and maintenance controls
- Patching windows, crew responsibilities and recovery
Operational technology and live-system activity are scoped with the responsible technical and safety teams.
02 / DEFENCE
Defence & engineering
Clear security evidence for programme decisions, supplier reviews and engineering milestones.
- Project and information asset assurance
- Configuration, governance and risk reviews
- Evidence for accountable decision makers
Information handling and specialist support are agreed for each engagement.
03 / BUSINESS
Businesses & suppliers
Proportionate security oversight for organisations that need a practical route from concern to action.
- Independent control and supplier reviews
- Certification readiness and improvement plans
- Ongoing security leadership and risk reporting
A defined scope, clear priorities and recommendations your team can use.
WHAT WE DO
Find the assurance
your decision needs.
Focused reviews or continuing support. Every engagement starts with an agreed scope and ends with clear findings and next steps.
+Penetration testing & vulnerability assessment
Identify exploitable weaknesses and technical exposure through an agreed, authorised assessment. Testing methods, delivery arrangements and specialist support are confirmed during scoping, with operational and safety constraints considered throughout.
What you receive
Prioritised technical findings, practical remediation advice and a management briefing. Testing and any retest are subject to a separately agreed scope.
01Cyber assurance review
Review how assets, access, patching, backups and procedures are managed. We sample evidence and speak to the people responsible to understand how controls operate in practice.
What you receive
An assurance report, prioritised action list and management briefing, with the scope and limitations made clear.
02Cyber risk assessment
Explore credible threat scenarios, operational dependencies and existing protections. Assess likelihood and impact using an agreed method.
What you receive
A risk register, treatment options and a decision briefing. Risk acceptance remains with the accountable owner.
03Security architecture review
Examine system boundaries, data flows, privileged access, separation and recovery. Challenge the assumptions behind a proposed or existing design.
What you receive
A design review report, control recommendations and unresolved assurance questions. Specialist input is agreed where needed.
04Product security & threat modelling
Identify how a connected product could be misused and translate those scenarios into security requirements. APT leads the assurance work, with specialist delivery agreed for the product.
What you receive
A threat model, recommended security requirements and an assurance plan. Subject to specialist availability and an agreed delivery scope.
05Supplier cyber assurance
Look beyond questionnaire answers to the evidence supporting a supplier's controls, access, dependencies and continuity arrangements.
What you receive
A supplier risk summary, due-diligence record and follow-up actions to support appointment or renewal decisions.
06ISO 27001 readiness review
Review your information security management system's scope, risk treatment, operating evidence and improvement processes against agreed ISO/IEC 27001 requirements.
What you receive
A readiness gap report, preparation plan and leadership briefing. This service prepares you for assessment; it does not award certification.
07Cyber Essentials readiness
Clarify assessment scope, review the core technical controls and organise the evidence and changes needed before submission.
What you receive
A readiness checklist, action plan and questionnaire guidance. Certification assessment, fees and Plus testing are separate.
08Configuration & hardening review
Compare an agreed sample of devices or services against a suitable CIS, STIG or client baseline. Review deviations and operational exceptions.
What you receive
Configuration findings, a prioritised hardening plan and an exception record. Production changes and penetration testing are separately scoped.
09Incident response exercise
Rehearse a realistic cyber incident through a facilitated tabletop exercise, exploring responsibilities, escalation, communications and recovery decisions.
What you receive
An exercise pack, observation report and improvement plan. Live response and technical recovery are separate services.
10Fractional security lead
Regular, scheduled security leadership to keep risks, supplier concerns and improvement actions moving between major reviews.
What you receive
Risk reviews, a maintained action tracker and concise leadership updates within agreed capacity. This is not a 24/7 monitoring or emergency response service.
HOW WE WORK
From evidence
to a clear decision.
Work shaped around the question you need answered, with scope, responsibilities and deliverables agreed from the outset.
- 01
Understand
Define the operational context, concern and decision deadline.
- 02
Agree
Set the boundary, evidence, access, timetable and written fee.
- 03
Review
Examine records, speak to owners and check factual findings.
- 04
Act
Brief decision makers and prioritise practical next steps.
WORK WITH APT
Start with the question
you need answered.
A vessel review, a supplier decision or a clearer view of your security controls: the starting point is a defined requirement.