Baldur Security is a Danish, research-driven offensive security company. We find the vulnerabilities others miss, in software like Chrome, Fortinet, Mitel and PRTG, and in your own systems. This page covers what a penetration test is, how it works with us, and what you get.
A penetration test is a controlled attack on your systems, run by security people with permission. The goal is to find the vulnerabilities a real attacker would use, and prove they can be exploited, before anyone with bad intent does. A good test does not stop at a list of possible problems; it shows the concrete way in, what can be reached from there, and what it takes to close it.
Penetration testing goes by many names: pentest, security test, assessment, red team. It is the same thing: a manual, targeted assessment where a human actively tries to break in.
A vulnerability scan is automated. It compares your systems against a list of known flaws and reports what matches. That is useful, but a scanner does not understand your business logic and cannot reason its way to an attack. It finds the known; it misses the access-control and logic flaws, exactly the kind that cause the serious breaches. A penetration test is manual and done by people who look for precisely that.
We test what attackers actually go after. The typical engagements:
We agree targets, rules of engagement and what a critical finding means for your business before anything starts. You know exactly what we touch, and when.
We map the real attack surface: endpoints, versions, exposed services and how the pieces talk to each other.
We run advanced attacks like a real threat actor. Scanners find the obvious; access-control and logic flaws take a human, and those are the ones that hurt.
With source access we trace the bug to the line and prove whether it is exploitable.
A management summary and a technical report: every finding reproducible, rated, and paired with a concrete fix.
After you remediate, we verify the fix actually closes the issue, and that the fix is not incomplete.
The price of a penetration test depends on the work, not a fixed price list. What determines it:
How we do it in practice: you tell us what needs testing on a short call. We come back with a fixed quote and a number of days, so you know exactly what you pay for before we start. Book a scoping call and you have a concrete quote.
More companies have to test because legislation or a standard requires it. In short:
We write the report so it can go straight into your documentation for an auditor or a customer.
Baldur Security (Baldur Security ApS, CVR 45584860) is a Danish offensive security company. We work white box, ideally with source code, because it finds more than probing blind from the outside. The team holds OSCE and OSCP, has delivered 100+ penetration tests across sectors such as banking, healthcare and the public sector for organisations from 10 to 10,000 employees, and has published around 33 CVEs and submitted 300+ bug bounty reports. A few examples:
See all our research and advisories →
A scan is automated and finds known flaws. A penetration test is manual: a human actively tries to break in and also finds logic and access-control flaws a scanner cannot reason its way to.
At least once a year and on major changes: a new application, new architecture or a significant feature. Some standards and customers require it annually. For more continuous needs we can build AI pentest bots that test on an ongoing basis.
Most engagements are one to three weeks depending on scope. We give a number of days with the quote, so you know the timeline up front.
Both happen. We agree it in scoping and set the rules so we do not disrupt operations. A lot can be tested safely in production once the boundaries are set, but we prefer a test environment.
Not necessarily, but we recommend it. Source access finds more and deeper flaws in less time. We also test black box if that is what you need.
It depends on scope, complexity, environment and access. We give a fixed quote after a short scoping call, so you know exactly what you pay for before we start.
Yes. We write the report so it can be used directly as documentation for an auditor, customer or authority.
A management summary, a technical report with reproducible findings and concrete fixes, an expert walkthrough with Q&A, a letter of attestation, and a retest once you have remediated.
We are based in Denmark and work with clients worldwide. Reports and meetings can be in Danish or English.
A 30-minute call is enough to scope most engagements, and it is entirely no-obligation.
Book a scoping call