ABOUT DEX SECURITY
Disciplined security assessments for modern businesses.
Dex Security is an independent cybersecurity consultancy. We provide ongoing penetration testing, external attack surface monitoring, and technical security reviews on predictable monthly retainers.
Our Principles
How we approach security testing.
We focus on finding weaknesses that an adversary could realistically exploit, and giving you clear instructions on how to eliminate them.
Human Judgement Over Scanner Noise
Automated vulnerability scanners produce pages of low-confidence warnings. We manually verify and probe every identified issue, demonstrating real-world exploitability and eliminating false alarms before reports reach you.
Authorized, Scoped Testing Only
We test only systems explicitly authorized in writing. Our rules of engagement specify exact IP ranges, domains, and testing hours to ensure zero disruption to live operations, patient care, or booking services.
Continuous Protection Over Point-in-Time Audits
An annual audit is obsolete the day an engineering team ships an update or a new subdomain is provisioned. Our PTaaS model pairs continuous automated surveillance with scheduled recurring manual reviews on a predictable retainer.
Actionable, Plain-English Reporting
We write dual-focus deliverables: an executive summary tailored for practice owners and leadership, alongside step-by-step reproduction instructions and code-level remediation guidance for developers and IT teams.
Methodology
Grounded in recognized industry frameworks.
Our technical evaluations adhere to established open security standards, adapted to your specific web architecture and agreed scope.
OWASP Web Security Testing Guide (WSTG)
Comprehensive manual testing covering authentication, session handling, access control, input validation, and business logic flaws.
NIST Special Publication 800-115
Technical guide to information security testing and assessment, providing structured reconnaissance, vulnerability discovery, and exploit verification.
Penetration Testing Execution Standard (PTES)
Rigorous framework governing pre-engagement scope definition, threat modeling, perimeter analysis, exploitation, and post-engagement reporting.
Service Delivery
Remote assessments for businesses across the United States.
All external penetration testing and attack surface monitoring is delivered remotely against approved internet-facing endpoints. We serve commercial businesses, healthcare clinics, and digital organizations across the United States and internationally.
We believe in ethical transparency: we do not maintain physical storefronts in every city we serve, nor do we invent local branch offices. Our testing is conducted from secure, dedicated assessment infrastructure directly against your authorized digital perimeter.
Trust & Transparency Commitments
- ✓Written Authorization: Testing begins only after written scope agreements and authorizations are countersigned.
- ✓Non-Destructive Execution: We prioritize operational continuity; we do not run denial-of-service tests or alter live database records.
- ✓Strict Data Confidentiality: Assessment data, logs, and vulnerability evidence are encrypted in transit and at rest, and never shared with third parties.
- ✓Retest Verification: Every tier includes a retest of your fixed findings to verify that vulnerabilities are closed.
Connect With Us
Discuss your security requirements.
Whether you need a one-off external penetration test or an ongoing monthly PTaaS retainer, we are here to provide clear, actionable guidance.