Penetration testing and cyber security in Wales
APOLLOSEC is a Welsh offensive security company, headquartered in Cardiff. We test the applications, networks, cloud and people of organisations across Wales, and work with clients across the UK and Europe.
Based in Wales
Our headquarters are on West Bute Street in Cardiff Bay, and Apollo Cybersecurity Ltd’s registered office is in Fishguard, Pembrokeshire. We work with organisations right across Wales: Cardiff and Newport, Swansea, Neath and Llanelli, Bridgend, west Wales and Pembrokeshire, and north Wales including Wrexham.
Most testing is delivered remotely, from the internet or through a VPN or small test device on your network. When the work needs us in the building, for wireless testing, physical intrusion or some internal network tests, our consultants come to you.
Who we work with in Wales
Our Welsh clients include energy companies such as Gas4Wales and Pembrokeshire Energy and a Welsh local council.
The work ranges from continuous attack surface management, which finds the systems an organisation has forgotten it exposes, to phishing simulations and social engineering tests of staff and processes.
The Welsh context
The Welsh Government’s Cyber Action Plan for Wales, published in 2022, sets out an ambition for a cyber-resilient Wales across public services, businesses and communities. Public bodies and their suppliers are increasingly asked for evidence that their security is tested, not just written down.
Operators of essential services in Wales, such as energy and drinking water, fall under the UK NIS Regulations, where regulators use the NCSC Cyber Assessment Framework. Independent testing, vulnerability management and incident exercises are some of the most direct evidence against it. If you also supply organisations in the EU, see what NIS2 and DORA mean for you.
Help available in Wales
Wales has a strong cyber community. The Cyber Resilience Centre for Wales supports small businesses and charities, Cyber Wales brings together people and companies working in the sector, and the National Cyber Security Centre publishes free guidance for every size of organisation.
When you need an independent test of your defences, that is where we come in.
What we do for Welsh organisations
Penetration testing
Manual testing of applications, networks, cloud, mobile and wireless.
Read more →Web application testing
Access control and business logic flaws scanners miss.
Read more →Infrastructure testing
External and internal networks and Active Directory.
Read more →Cloud assessments
AWS, Azure, Google Cloud and Microsoft 365.
Read more →Attack surface management
Everything you expose to the internet, watched continuously.
Read more →Phishing simulation
Campaigns that mirror current lures, measured properly.
Read more →From Welsh clients
“APOLLOSEC was great at uncovering our exposed services and their risks. The platform helps us understand and map assets to vulnerabilities and they took the time to really get to know our business.”
“APOLLOSEC not only secured our organisation but also pinpointed critical areas for improvement. Their collaborative approach and consistent communication made us active participants in the process.”
“APOLLOSEC expertly enhanced our defences against social engineering. They exposed hidden vulnerabilities and gave us actionable insights that improved our security posture.”