NPH
Network Purple Hacker
Validates your expertise in securing network infrastructures — from perimeter to internal segmentation.
Purple Teaming — offence and defence, one discipline
Let us hack you before the cybercriminals do.
Nine penetration testing practices, four practitioner certifications, one detection product. Operating internationally.
The thesis
Red team attacks. Blue team defends. We are both, on purpose.
Most firms sell you one half. A red team hands you a breach report and leaves; a blue team hardens blind to how attackers actually move. Purple teaming is the integration — we break in, then we make sure that exact path is closed and detected. That is the entire company, and it is why the hat is purple.
OffenceRed team
+
DefenceBlue team
=
IntegratedPurple team
01 · We break in
Every engagement starts on the offensive. We take the position of a motivated attacker against the scope you approve — no assumptions, no theatre, real exploitation.
02 · We prove impact
A finding without a consequence is noise. We chain weaknesses to a concrete outcome — domain admin, customer data, a full account takeover — and document the path.
03 · We close & detect
Then we switch sides. We work with your team so the path is remediated and instrumented, so the next attempt is stopped and seen. That is the purple half most vendors skip.
Pentest · 9 practices
Nine surfaces. Each tested by someone who specialises in it.
Attackers do not respect your org chart, and neither do we. Pick the surface that keeps you up at night — every engagement ends with the same next step: a free consultation and a custom checklist.
01
External Network
Everything an attacker can reach from the public internet — exposed services, misconfigurations, forgotten hosts.
Perimeter 02Internal Network
The assumed-breach view: what a foothold becomes once someone is already inside the LAN.
Post-breach 03Social Engineering
Phishing, pretexting and physical pretext against the layer no firewall covers — your people.
Human 04Web Application
Authenticated and unauthenticated testing against business logic, access control and injection.
Application 05Wireless Security
Rogue access points, weak authentication and segmentation failures across your RF footprint.
Radio 06Active Directory
The path most breaches actually take — from a single credential to full domain compromise.
Identity 07Cloud
IAM, storage exposure and privilege escalation across AWS, Azure and GCP environments.
Cloud 08API
Broken authorisation, mass assignment and the logic flaws that automated scanners miss.
Application 09Mobile Application
iOS and Android clients, their storage, transport and the backends they talk to.
Application
Academy · 4 certifications
Build the career, not just the report.
Four proprietary certifications for practitioners who want the purple-team skill set on their profile. Online, on-demand, built on labs — the same techniques our consultants use in the field.
WPH
Web Purple Hacker
Recognises your proficiency in securing web applications, services and APIs against real attack chains.
ADPH
Active Directory Purple Hacker
Affirms your skills in securing Microsoft Windows Active Directory environments end to end.
WNPH
Wireless Networks Purple Hacker
Showcases your expertise in securing wireless network infrastructures across the RF surface.
- Online & on-demand
- Hands-on labs, not slideware
- Tutor support throughout
- Certificate on completion
Product · DDoS Detector
Detection that runs while you sleep.
DDoS Detector is our standalone SaaS product: continuous traffic analysis that separates a volumetric attack from a traffic spike, and tells you which one you are looking at before your service goes down.
Clients
Two CEOs put their name to it.
Not a logo wall. Two named leaders — one Australian telecom, one Chilean ISP — on the record about work we still do.
At DuxTel, our cybersecurity partners, known as Purple Hackers, are experts in Purple Teaming — integrating offensive and defensive strategies.
Austro Internet relies on Purple Hackers for regular third-party penetration testing, helping us maintain a secure ISP network.
The team
Six people. No subcontractors.
Every engagement is run by the same team you see here — named, reachable, and accountable for the report you get.
Francisco Méndez
Certified Hacker OSCP+ · Arquitectura de redes
Manuel Toledo
Programación · LLMs · Redes · Ciberseguridad
Luis Sánchez
Gestión ISPs · Redes · OLTs
Manuel Pérez
LLMs · Chatbots · Automatización · Marketing
Jesús Zambrano
Software engineering · Machine learning
Carlos Torres
Ciberseguridad · Servidores · Virtualización
Free · No obligation
One hour, one checklist, zero pressure.
Book a one-hour consultation. We discuss your specific security concerns and hand you a custom security checklist and expert advice — whether or not you go further with us.
- A working session with a senior consultant, not a sales call.
- A custom security checklist scoped to your environment.
- Clear next steps you can act on with or without us.
FAQ
Straight answers.
Purple teaming runs offensive testing (red team) and defensive hardening (blue team) as a single engagement. Instead of handing you a list of vulnerabilities and leaving, we exploit the weakness and then work with your team so the same path is closed and detected next time.
A one-hour consultation where we discuss your specific security concerns and provide you with a custom security checklist, along with expert advice. There is no obligation to engage further.
Purple Hackers operates internationally. Engagements are delivered remotely or on-site depending on scope, with clients across Asia-Pacific, Latin America and Europe.
The four certifications — NPH, WPH, ADPH and WNPH — are proprietary Purple Hackers credentials. Each is delivered online and on-demand with video, materials, labs and tutor support, and a certificate on completion.
Every finding is documented with reproduction steps, business impact and remediation guidance, prioritised by severity. Reports are written to be read by both engineers and executives.