Elite penetration testing experts bringing real-world offensive security expertise to organizations across New York and worldwide.
Founded by a team of offensive security professionals with decades of combined experience, ExodusSec was born from a simple observation: organizations needed more than just checkbox compliance — they needed real-world security validation.
We've built our reputation by thinking like attackers, testing like professionals, and reporting with clarity. Our team has secured critical infrastructure for government agencies, protected financial institutions from sophisticated threats, and helped startups build security into their DNA from day one.
Today, we're proud to be trusted advisors to organizations across industries, helping them understand their security posture and improve their defenses against ever-evolving threats.
To empower organizations with the knowledge and insights they need to defend against real-world cyber threats through comprehensive, ethical, and impactful security assessments.
We don't just run automated scans. Our team manually validates every finding and explores attack paths that automated tools miss.
We work collaboratively with your team, providing actionable recommendations and knowledge transfer throughout the engagement.
Our reports are designed for both technical teams and executive leadership, with clear risk ratings and remediation guidance.
Four commitments that shape how we work with every client, on every assessment.
We operate with complete transparency and ethical standards, maintaining strict confidentiality and professional conduct in all engagements.
We continuously invest in training, research, and skill development to stay ahead of emerging threats and attack techniques.
We focus on findings that matter, prioritizing risks that pose real threats to your business operations and data security.
We develop custom tools and methodologies to address unique security challenges and stay ahead of adversary techniques.
Athan founded ExodusSec on the principle that organizations deserve more than checkbox compliance — they deserve real-world validation of their security posture, delivered by people who think like attackers and communicate like trusted advisors.
He leads the company's strategic direction, client relationships, and technical standards, drawing on years of hands-on offensive security experience across financial services, technology, and critical infrastructure sectors.
Security professionals bringing diverse backgrounds from offensive security, threat intelligence, and client success.
Drives new client relationships across New York and beyond, scoping engagements and connecting organizations with the right security assessment for their environment.
Manages ongoing client relationships post-engagement, coordinating retesting, renewals, and ensuring every client gets continued value from their security program.
Leads red team engagements and full-spectrum adversarial simulations. Former offensive operator with experience across critical infrastructure assessments.
Specializes in web application and API security, identifying OWASP Top 10 vulnerabilities, authentication flaws, and business logic exploits.
Expert in AWS, Azure, and GCP security with deep knowledge of cloud-native attack vectors, IAM misconfigurations, and containerization security.
Focuses on iOS and Android security, reverse engineering, and mobile application penetration testing with an extensive research background.
Specializes in internal and external network assessments, wireless security, and physical penetration testing engagements.
Let's discuss how our team can help strengthen your security posture.