Skip to main content

Active incident? Get incident help

MalwareAnalysis.app

Request an assessment Get incident help

Cyber Security Services

Authorised security work

Understand unknown software. Investigate malicious code. Test exposure. Strengthen what you can change. Recover with evidence intact.

Choose from six cyber security services spanning software and firmware reverse engineering, private malware analysis, secure code review, penetration testing, security audits and ransomware response. Each service page explains fit, scope, exclusions and outputs before you enquire.

Request an assessment
Browse all six services
  • Written scope
  • No public evidence upload
  • Service-specific outputs
service.routeSELECT
  1. 01InspectSoftware + firmware
  2. 02InvestigateSuspicious artefacts
  3. 03HardenSource code
  4. 04TestLive systems
  5. 05AssureControls + evidence
  6. 06RecoverRansomware incidents
Authorised targetDefined questionUseful output

Active incident route

Encryption, extortion or an intrusion in progress?

Use the incident pathway now. Share contact details and high-level impact only; do not send malware, credentials or evidence through this website.

Get incident help

Six specialist services

Cyber security services by outcome

Select the service that matches the question you need answered. If several apply, start with high-level context and the assessment can be routed before sensitive material changes hands.

01Understand

Software & Firmware Reverse Engineering

Authorised reverse engineering of undocumented software and firmware: behaviour maps, protocol specifications and risk findings. Not original-source reconstruction.

Choose this whenYou have an undocumented binary, firmware image, protocol or file format you are authorised to examine.
Explore reverse engineering services
02Investigate

Malware Analysis & Threat Intelligence

Private malware analysis in a controlled environment. Behaviour, indicators of compromise and a plain-language brief. Samples are never uploaded through this website.

Choose this whenA suspicious file, EDR alert or possible implant needs controlled technical investigation.
Explore private malware analysis
03Strengthen

Secure Code Review & Codebase Hardening

Manual secure code review beyond scanner output: threat modelling, exploitable defects and a risk-ranked remediation backlog your engineers can work.

Choose this whenYou own or maintain source code and need exploitable defects translated into engineering work.
Explore secure code review
04Validate

Penetration Testing

Authorised penetration testing with signed rules of engagement, evidence-based findings, reproduction steps and a retest against remediation.

Choose this whenYou need to test whether a real attack path is reachable in an authorised target.
Explore penetration testing services
05Assure

Security Audits & Assurance

Evidence-based security audits against recognised frameworks, with a prioritised, owned roadmap, not a compliance percentage.

Choose this whenA board, buyer or assurance process needs evidence about controls and a prioritised roadmap.
Explore security audit services
06Respond

Ransomware Response & Recovery

Ransomware containment, evidence preservation, eradication and recovery validation. No decryption guarantee and no encouragement to pay.

Choose this whenEncryption, extortion or an intrusion requires containment and recovery. For activity in progress, use incident help first.
Explore ransomware response services

Choose by question

Which cyber security service do you need?

The right starting point depends on the decision, not the technology label. These boundaries distinguish the services buyers most often need to compare.

Reverse engineering or malware analysis?
Choose software and firmware reverse engineering for undocumented technology that is not presumed malicious. Choose malware analysis and threat intelligence when malicious behaviour is suspected.
Secure code review or penetration testing?
Choose secure code review and hardening when source code is available and can still be changed. Choose penetration testing to validate attack paths against an authorised running target.
Penetration testing or a security audit?
Penetration testing asks whether a weakness can be exploited. Security audits and assurance examine control evidence against agreed expectations and produce an owned improvement roadmap.

A controlled start

How a cyber security engagement begins

Initial contact is deliberately lightweight. Detailed technical material is handled only after fit, authority and scope are established.

  1. 01

    Describe the decision

    Share contact details, the affected technology and the question you need answered at a high level.

  2. 02

    Confirm fit and authority

    The appropriate service, authorised target, boundaries and expected output are agreed in writing.

  3. 03

    Perform the work

    Analysis, review or testing takes place off this public website under the agreed handling arrangements.

  4. 04

    Use the output

    You receive the service-specific findings, evidence or roadmap described on the relevant service page.

Safe first contact

Start with scope, not sensitive material

MalwareAnalysis.app is not a public malware scanner, sandbox or file-upload service. Send only contact details and a high-level description. Do not send malware, firmware, source code, credentials or client evidence through this website.

Services are contracted through Cybersecurity Engineering Pty Ltd (ABN 45 702 088 533).

Request an assessment
Get incident help