1,000+ bugs reported by our team
Founder Brandyn Murtagh has reported 500+ confirmed bugs through his security research.
Specialists. Researchers. Your assessment team.
About MurtaSec
MurtaSec is a London-based penetration testing consultancy helping organisations understand the security of the software they build and rely on.
We bring together security researchers, bug bounty hunters and penetration testers with the specialist experience your assessment needs.
Specialist-led assessments
An AI-enabled product, a SaaS platform and a healthcare integration each call for different experience. We select the people leading and delivering your assessment for their expertise in the technology or sector involved.
Your proposal identifies the specialists working on your engagement. You can discuss the findings with the people who investigated them, ask questions and understand what they mean for your application.
Why MurtaSec exists
Exceptional security research. Applied to your assessment.
MurtaSec was founded to bring the depth, creativity and expertise of leading security researchers into penetration testing. We bring together specialists who understand your technology, investigate how it could be compromised, and give your team clear findings they can act on.
Our approach combines the curiosity of security research with the focus of a defined assessment: understanding your systems, investigating the weaknesses that matter, and helping you address them.
Our credentials
The experience behind MurtaSec combines security research, recognition at live hacking events and public technical work. Founder Brandyn Murtagh holds CREST and OffSec certifications and brings over 10 years of cybersecurity experience.
Awards for security research
Recognition at live hacking events includes:
- Most number of criticals
- Most number of criticals by team
- Most number of criticals for a given scope
- Most impactful bug
- Best collaboration
- Most creative bug
- Best written report
- Exterminator
Research shared beyond the assessment
Brandyn has been featured by the BBC, ITV and other media outlets. He also co-hosts the Critical Thinking Bug Bounty Podcast and shares his work through technical writing and public speaking.
Responsible disclosure & bug bounty
Our research
Our researchers have identified vulnerabilities through responsible disclosure and bug bounty programmes involving these organisations and their products.
- OpenAI
- Amazon
- AWS
- NVIDIA
- Stripe
- Tide
- Yieldstreet
- Epic Games
- Xiaomi
- Binance
Organisation names refer to security research and responsible disclosure activity. This experience informs how we investigate the applications and workflows in your assessment.
MurtaSec at a glance
| Fact | Detail |
|---|---|
| Company | MurtaSec |
| Specialism | Security assessments and penetration testing for applications, APIs and AI systems |
| Based in | London, United Kingdom |
| Who we work with | Lead developers, technology leaders and security leaders |
| AI focus | Organisations building AI products or integrating AI into applications and workflows |
| Sector focus | SaaS, legal technology and healthcare |
| Markets | United Kingdom and United States |
| Contact | sales@murtasec.com |
Talk to us about your assessment
Tell us about your application, what prompted the test and when you need answers. We'll help you define the scope and identify the specialist expertise it needs.