About ReactiveZero

Offensive security, done properly.

ReactiveZero is a Dutch cybersecurity consultancy based in Rotterdam. Our certified consultants test, investigate and report on the systems that matter to you, and they do the work themselves, from scoping to the final debrief.

Who we are

A consultancy built around practitioners.

ReactiveZero is an offensive-security consultancy in Rotterdam, the Netherlands. We examine systems the way a capable adversary would, then show you precisely what we found, how we found it and what to change.

Our consultants hold OSCP, CEH and CHFI certifications and carry out every engagement themselves. The people you meet at the scoping call are the people who do the testing and write the report.

Our work spans penetration testing, red teaming, cloud security assessments, code review, phishing campaigns, mobile application testing, digital forensics, incident response, malware analysis and bespoke projects, for organisations in finance, healthcare, critical infrastructure, government and the startup and SaaS sector across Europe.

How we work

Four commitments on every engagement.

They shape how we scope, how we test and what you receive at the end.

Working principles
  • Evidence

    Evidence over opinion

    Every finding comes with the request, the response and the steps to reproduce it. If we cannot demonstrate it, it is not in the report.

  • Safety

    Production-safe by design

    We agree scope, windows and stop conditions before the first packet is sent, and we test live systems with the care they deserve.

  • Remediation

    Fixes you can merge

    Recommendations name the file, the setting or the control to change, written for the engineer who will do it, not for a slide.

  • Reporting

    Plain-language reporting

    One report serves the board and the build team: an executive summary in plain terms, followed by full technical detail and a prioritised list.

Certified team

The credentials behind the work.

The consultants who scope, test and report hold recognised offensive-security and forensics certifications, and we assess against the frameworks your auditors and regulators expect.

Credentials & Compliance
Certified Team
  • OSCP
    Offensive Security
  • CEH
    Certified Ethical Hacker
  • CHFI
    Computer Hacking Forensic Investigator
Frameworks We Assess Against
  • ISO 27001
    ISMS standard
  • NIS2
    EU directive
  • DORA
    EU regulation
  • PCI DSS
    Payment data
  • MITRE ATT&CK
    Adversary TTPs
  • OWASP
    Application security
Where we are

Based in Rotterdam. Working across Europe.

We are glad to meet at our office, at yours or over a call, whichever suits the conversation.

Office Rotterdam · NL
Admiraliteitskade 50-923 3063ED Rotterdam The Netherlands
KVK
42185043

Get in Touch

Ready to strengthen your security posture? Let's discuss how we can help protect your organization.