Penetration Testing

Governance Tells You What Should Happen. Adversarial Testing Tells You What Does.

Governance Tells You What Should Happen. Adversarial Testing Tells You What Does. 2048 1152 Andrew Heller
AI governance documents what should happen. Lares adversarial testing proves what does, attacking your AI deployments the way real adversaries would. read more

How Security Assessments Are Priced & How to Run a Better RFP

How Security Assessments Are Priced & How to Run a Better RFP 1200 630 Andrew Heller
Security assessment pricing follows scope, not quality. Learn how vendors price tests and how to write an RFP that gets you real coverage. read more

Technical Analysis of the Rockstar Games Compromises: Exploit Chaining and Zero Trust Failures (2018–2026)

Technical Analysis of the Rockstar Games Compromises: Exploit Chaining and Zero Trust Failures (2018–2026) 1672 941 Andrew Heller
What the Rockstar Games security incidents teach defenders about phishing-resistant MFA, SaaS token risk, internal segmentation, and data exfiltration detection. read more

Minnesota Water Attacks and the Predictable Reality

Minnesota Water Attacks and the Predictable Reality 1200 630 Andrew Heller
How possible Iran-linked actors exploited exposed PLCs in the 2026 Minnesota water attacks. MITRE ATT&CK mapping, risk matrix, and OT security lessons from Lares. read more

The Importance of OT Assessments in Critical Infrastructure

The Importance of OT Assessments in Critical Infrastructure 1200 630 Lares Labs
Why testing operational technology (OT) and ICS/SCADA systems is an operational imperative for securing critical infrastructure beyond compliance. read more

Social Profiling – OSINT for Red/Blue

Social Profiling – OSINT for Red/Blue 1200 630 Lares Labs

This post will give you an overview of key things to look for from an offensive and defensive perspective to look out for employees, interns, and contractors over sharing information…

read more

Multiple Paths to Compromise An Environment

Multiple Paths to Compromise An Environment 1200 630 Lares Labs
Attackers rarely need zero-days. Weak passwords, poor data governance, and flat networks give them multiple paths to compromise your environment. Learn how these weaknesses combine into real attack paths and how to shut them down. read more

Beyond the Scanner: Lares OWASP Top 10 Findings

Beyond the Scanner: Lares OWASP Top 10 Findings 1200 630 Lares Labs
Lares maps real‑world attack paths to the 2025 OWASP Top 10, showing where clean scan dashboards still fail and how AppSec leaders should test beyond the scanner. read more

Pentesting 101 – Part 4: Penetration Test Report & Debrief – The Deliverables

Pentesting 101 – Part 4: Penetration Test Report & Debrief – The Deliverables 1037 671 Lares Labs
What actually happens once your penetration test begins? In Part 3 of our Pentesting 101 series, we walk through the complete penetration testing methodology. Discover the critical steps involved in executing an assessment—from pre-engagement checklists and reconnaissance to attack simulation, exploitation, and the final client debrief—so you know exactly what to expect from your testing partner. read more

Pentesting 101 – Part 3: Executing the Scope-of-Work & Penetration Testing

Pentesting 101 – Part 3: Executing the Scope-of-Work & Penetration Testing 1412 1968 Lares Labs
What actually happens once your penetration test begins? In Part 3 of our Pentesting 101 series, we walk through the complete penetration testing methodology. Discover the critical steps involved in executing an assessment—from pre-engagement checklists and reconnaissance to attack simulation, exploitation, and the final client debrief—so you know exactly what to expect from your testing partner. read more

Where There is Unity, There is Victory

[Ubi concordia, ibi victoria]

– Publius Syrus

Contact Lares Consulting logo (image)

Continuous defensive improvement through adversarial simulation and collaboration.

Email Us

©2025 Lares, a Damovo Company | All rights reserved.