Site Directory
Every page, in one place
Services, the Precursor Intelligence platform, sectors, company pages and research across precursorsecurity.com.284 pages
Services
What we do
Offensive Security47 pages
Penetration testing and red team
- Offensive Security Overview
- Penetration Testing
- Web Application Pentest
- Network Penetration Testing
- External Network Pentest
- Internal Network Pentest
- Mobile Application Pentest
- Cloud Penetration Testing
- AI & LLM Penetration Testing
- SaaS Penetration Testing
- Configuration Reviews
- Red Team Operations
- Social Engineering
- NCSC IT Health Check
- OT / ICS / IoT Security
- Continuous Security Testing
Defensive Security22 pages
Monitoring, detection and response
Compliance13 pages
Certification and regulation
Advisory5 pages
Consultancy and assurance
Precursor Intelligence
Platform and glossary
Precursor Intelligence9 pages
The platform
Glossary57 pages
Security intelligence glossary
- All Glossary Terms
- Alert Fatigue
- APT (Advanced Persistent Threat)
- Attack Surface Management (ASM)
- Attack Surface Reduction
- Attack Vector
- BEC (Business Email Compromise)
- Black Box Testing
- Broken Access Control
- CAASM (Cyber Asset Attack Surface Management)
- CISA KEV (Known Exploited Vulnerabilities)
- CTEM (Continuous Threat Exposure Management)
- CVE Database
- CVSS (Common Vulnerability Scoring System)
- Cyber Kill Chain
- Data Exfiltration
- DFIR (Digital Forensics and Incident Response)
- Digital Risk Protection (DRP)
- EASM (External Attack Surface Management)
- EDR (Endpoint Detection and Response)
- EPSS (Exploit Prediction Scoring System)
- IDOR (Insecure Direct Object Reference)
- Incident Response
- IOC (Indicators of Compromise)
- Kerberoasting
- Lateral Movement
- Log Management
- MCP (Model Context Protocol)
- MCP Server (for security)
- MDR (Managed Detection and Response)
- MITRE ATLAS
- MITRE ATT&CK
- MTTR and MTTD (Mean Time to Respond and Detect)
- NDR (Network Detection and Response)
- Pass-the-Hash
- Phishing
- Privilege Escalation
- PTaaS (Penetration Testing as a Service)
- Purple Teaming
- Ransomware
- Red Teaming
- Remote Code Execution (RCE)
- Security Vulnerability
- SIEM (Security Information and Event Management)
- SOAR (Security Orchestration, Automation and Response)
- SOC (Security Operations Centre)
- Spoofing Attack
- Supply Chain Attack
- Threat Actor
- Threat Detection
- Threat Hunting
- Threat Intelligence
- UEBA (User and Entity Behaviour Analytics)
- Vulnerability Assessment
- Vulnerability Management
- XDR (Extended Detection and Response)
- Zero-Day Exploit
Sectors & Company
Who we work with
Sectors15 pages
Industries we protect
Research
Guides and analysis
Guides40 pages
Buyer's guides and explainers
- Intelligence Library
- Cyber Security Glossary
- Best API Penetration Testing Companies UK
- Best Attack Surface Management UK
- Best Cloud Penetration Testing Companies UK
- Best Cyber Essentials Providers UK
- Best Cyber Security Companies London
- Best Cyber Security Companies UK
- Best Cyber Security for Small Business UK
- Best Dark Web Monitoring UK
- Best Incident Response Companies UK
- Best ISO 27001 Consultants UK
- Best Managed EDR Providers UK
- Best Managed SOC Providers UK
- Best MDR for Cyber Insurance
- Best MDR for Financial Services
- Best MDR for Healthcare
- Best MDR for Law Firms
- Best MDR for Microsoft 365
- Best MDR for Small Business UK
- Best MDR Providers UK
- Best Mobile App Penetration Testing Companies UK
- Best MSSP UK
- Best Penetration Testing Companies UK
- Best Penetration Testing for E-Commerce
- Best Penetration Testing for Financial Services
- Best Penetration Testing for Healthcare
- Best Penetration Testing for Law Firms
- Best Penetration Testing for PCI DSS
- Best Penetration Testing for SaaS
- Best Penetration Testing for SOC 2
- Best Phishing Simulation Providers UK
- Best Red Team Companies UK
- Best SOC as a Service Providers UK
- Best Threat Intelligence Platforms UK
- Best Vulnerability Scanning Services UK
- Best Web Application Penetration Testing Companies UK
- Outsourced Cyber Security
- What Is a Managed SOC
- What Is Continuous Penetration Testing
Articles47 pages
Research and analysis, newest first
- How We Spot Phishing Domains Before the First Email Is Sent
- The Sentinel Data Lake Is Finally Somewhere You Can Hunt (Mostly)
- Your Sentinel CI/CD Detections Are Now Defender XDR Detections
- MCP Server Security: How Malicious Tools Attack AI Agents
- What Is Penetration Testing? A Complete UK Guide (2026)
- What Is a Managed SOC? A UK Buyer's Guide (2026)
- What Claude Code Stores Locally (And What an Attacker Could Find)
- Precursor Joins the Shadowserver Alliance: Real Exploitation Data for UK Defenders
- What Cyber Insurance Covers in 2026 (and What It Doesn't)
- API vs web application penetration testing: scope, methodology, and when you need both
- Business logic vulnerabilities: what automated scanners miss in web application security
- Cross-site scripting (XSS): types, examples, and how to prevent it
- OWASP Top 10: what a penetration tester actually looks for
- SAST vs DAST vs penetration testing: which does your web application need?
- SQL injection explained: how testers find it and how developers prevent it
- WAF bypass: why a web application firewall alone will not protect you
- Cyber security due diligence in M&A: why penetration testing before acquisition can save you millions
- Post-merger IT security: how to secure two environments after an acquisition
- What is CREST Penetration Testing? Complete UK Guide (2026)
- Vendor onboarding security: how to vet new suppliers before they touch your network
- Cyber Essentials vs Cyber Essentials Plus: Which Level Does Your Organisation Actually Need?
- Internal vs external penetration testing: which does your organisation need?
- What the UK Cyber Security and Resilience Bill Means for Your Business
- Vulnerability assessment vs penetration testing: what is the difference and which do you need?
- Direct Send Phishing in M365: SOC Detection, Penetration Testing and MDR Strategies
- Supabase Security: Vulnerabilities, RLS Bypasses & How to Test
- Communicating Cyber Security Risk to the Board
- Artificial Intelligence for Security Operations: From Copilots to Agents
- Malicious Browser Extensions: How to Detect and Block Them
- Belsen Group FortiGate Credentials Leak: 15,000+ Devices Exposed on Dark Web
- CCS G-Cloud 14: Precursor Security Joins the Crown Commercial Service Framework
- WooCommerce Subscriptions Persistent XSS (CVE-2019-18834)
- Incident Response in Citrix Environments: A Practical Guide for Security Teams
- How Managed Security Service Providers and Cyber Insurers Work Together
- New Vulnerability in VMware ESXi Exploited by Ransomware Actors (CVE-2024-37085)
- Precursor Security Achieves CREST SOC Accreditation
- SEO Poisoning Malware: How MSIX Installers Are Used to Compromise Endpoints
- Understanding Managed Detection and Response (MDR)
- Microsoft 365 Security Configuration: 7 Steps to Protect Your Organisation
- Vulnerability Triage: A Beginner's Guide
- Cyber Security in Mergers and Acquisitions: What Every Investor and Acquirer Must Know
- MITRE Releases MITRE ATT&CK v15
- Cyber Essentials Requirements: The Complete Guide for UK Organisations
- How to Apply Microsoft 365 Security Hardening: 15 Technical Controls for Desktop Deployments
- NHS DSP Toolkit: A Beginner's Guide to Getting Started
- Vulnerability Remediation and Regression Testing: The Step Most Teams Skip
- Cyber Security for Law Firms: Why the Legal Sector is a Prime Target for Cyber Criminals
Comparisons10 pages