Assessment

Penetration testingSimulate real attacks, identify and fix your vulnerabilities.Configuration auditHarden the configuration of your systems (servers, network...).Strategic auditTake stock of your architecture and security policy.

Protection

Incident responseInvestigation and recovery after an attack.RemediationImplementation of fixes and long-term support.Training and awarenessTrain your staff in security best practices.

Packaged offers

Web & mobile applicationFull audit of a web or mobile application.SMB StarterAn accessible offer to strengthen your security.Full partnershipGuidance and support all year long.Red TeamPut your defenses to the test with realistic attacks.

About us Blog Online quote Contact

The HELX blog

Research, analysis & field notes

Our guides and analyses on offensive and defensive security, written by the HELX team.

All Advisory Pentest Web OWASP Guide Redteam Forensic

Jorani

Affectées ≤ v1.0.4Correctif Unpatched

Advisory•4 min

Authenticated SQL injection in Jorani

Simon Juhel·February 6, 2026

InvoicePlane

CVE-2025-67082CVE-2025-67083+1

Advisory•3 min

Multiple vulnerabilities on Invoice Plane

Jonathan Chambre·January 15, 2026

Agora Project

CVE-2025-67076CVE-2025-67077+2

Advisory•3 min

Multiple vulnerabilities on Agora Project

Jonathan Chambre·January 14, 2026

ITFlow

Advisory•3 min

Multiple vulnerabilities on ITFlow

Jonathan Chambre·January 14, 2026

OWASP Top 10: 20 years of evolving web threats, cybersecurity visual with icons on a blue and purple digital background

PentestWebOWASP•7 min

Twenty Years of the OWASP Top 10: How Web Threats Evolved from 2003 to 2025

A look back at the history of the OWASP Top 10 to understand how web vulnerabilities have changed over twenty years, and to identify the key factors that will shape the security of tomorrow.

Simon Juhel·August 26, 2025

Illustration of cybersecurity threats split between external hacker attacks and web vulnerabilities such as XSS. On the left, a hacker with a firewall and a globe represents external attacks. On the right, a stylized head labeled XSS represents web threats such as cross-site scripting.

GuidePentest•4 min

Web application pentest or external pentest: how to choose the right approach for your business

Should you go for an external penetration test or an application pentest? This guide helps you make the right call based on your objectives, your attack surface and your constraints. Learn the differences, the typical use cases, the decision criteria and how to avoid spending your budget on the wrong test.

Simon Juhel·July 23, 2025

Illustration of a Red Team cybersecurity exercise with physical intrusion, surveillance bypass, and hacking tools

GuideRedteam•16 min

A Complete Overview of Red Team Exercises

Red Team exercises measure how well an organization holds up against realistic attacks. Here is how they work, the key stages, the results you can expect, and why they are a lever for strengthening your cybersecurity.

Simon Juhel·July 4, 2025

Tell us about your project.

Let us talk through your needs and expectations and build the right service for you.

Contact us Get an online quote