Credentials

Verifiable mastery across every offensive cybersecurity discipline.

We hold more than 35 credentials issued by 12+ industry-recognised certifying authorities, covering penetration testing, red team operations, cloud infrastructure, governance, and compliance.

Offensive Security & Penetration Testing

Hands-on offensive cybersecurity expertise across web applications, mobile applications, APIs, Active Directory, and network infrastructure.

OSCE3
OSCE³OffSec Certified Expert³
OSEP
OSEPOffSec Experienced Penetration Tester
OSWE
OSWEOffSec Web Expert
OSED
OSEDOffSec Exploit Developer
OSCP
OSCPOffSec Certified Professional
OSCE
OSCEOffSec Certified Expert (Legacy)
OSWP
OSWPOffSec Wireless Professional
CPTS
HTB CPTSHTB Certified Penetration Testing Specialist
HTB CWES
HTB CWESHTB Certified Web Exploitation Specialist
HTB CWEE
HTB CWEEHTB Certified Web Exploitation Expert
HTB CAPE
HTB CAPEHTB Certified Active Directory Pentesting Expert
eCPTX
eCPTXeLearnSecurity Certified Penetration Tester eXtreme
eWPTX
eWPTXeLearnSecurity Web Application Penetration Tester eXtreme
eMAPT
eMAPTeLearnSecurity Mobile Application Penetration Tester
Burp Suite Certified Practitioner
BSCPBurp Suite Certified Practitioner
C|EH Master
CEH MasterCertified Ethical Hacker Master

Red Team Operations

Advanced adversary simulation expertise across full kill chain, assumed breach, and threat-led engagements.

CRTM
CRTMCertified Red Team Master
CRTL
CRTLCertified Red Team Lead
CRTO
CRTOCertified Red Team Operator
CRTE
CRTECertified Red Team Expert
CRTP
CRTPCertified Red Team Professional
CARTP
CARTPCertified Azure Red Team Professional
CRTA
CRTACertified Red Team Analyst

Cloud Security & Infrastructure

Deep cloud and network expertise across AWS, Azure, Google Cloud, and the infrastructure layers in between.

AWS Security Specialty
AWS Security SpecialtyAWS Certified Security — Specialty
AWS Solutions Architect Associate
AWS Solutions ArchitectAWS Certified Solutions Architect — Associate
Azure Security Engineer
Azure Security EngineerMicrosoft Certified: Azure Security Engineer Associate
Azure Administrator Associate
Azure AdministratorMicrosoft Certified: Azure Administrator Associate
Azure Solutions Architect Expert
Azure Solutions ArchitectMicrosoft Certified: Azure Solutions Architect Expert
Microsoft Security, Compliance and Identity Fundamentals
Azure Security Fund.Microsoft Certified: Security, Compliance & Identity Fundamentals
Google Cloud Professional Cloud Architect
GCP Cloud ArchitectGoogle Cloud Professional Cloud Architect
CCNA
CCNACisco Certified Network Associate
CND
CNDCertified Network Defender

Governance, Risk & Compliance

Strategic governance and audit fluency that bridges the gap between technical work and board-level risk.

CISM
CISMCertified Information Security Manager
CRISC
CRISCCertified in Risk and Information Systems Control
CISA
CISACertified Information Systems Auditor
BSI ISO/IEC 27001 Internal Auditor
ISO 27001 Internal AuditorBSI ISO/IEC 27001:2022 Internal Auditor (Practitioner)
§ Regulatory Alignment

Qualified across Hong Kong's regulatory cybersecurity frameworks.

Hong Kong's regulated sectors set specific qualification expectations for cybersecurity testing. Our credential stack maps to the qualifying certifications referenced across the relevant frameworks.

HKMA CFI 2.0 Banking & Financial Services

Our credentials cover every role in HKMA's intelligence-led Cyber Attack Simulation Testing (iCAST), from C-RAF Assessor through iCAST Tester for IT infrastructure and web application testing.

HKIA GL20 Insurance

Our credentials align with the Validator qualifications under HKIA's revised Guideline on Cybersecurity (GL20), supporting cyber resilience and Threat Intelligence Based Attack Simulation (TIBAS) assessments.

DPO Practice Guide HKSAR Government

Our credentials align with the qualifications listed in the Digital Policy Office's Practice Guide for Penetration Testing, supporting HKSAR Government penetration testing engagements.

§ Recognition & Backing

Backed & Supported by Hong Kong's leading institutions.

Beyond technical certifications, our work is supported by Hong Kong's leading institutional programmes, alongside formal recognition for our cybersecurity work.

HKSTP Incubation Programme

Park Company at HKSTP, selected for its Ideation and Incubation Programmes with multi-year R&D funding supporting our application of AI to offensive cybersecurity.

CityU HK Tech 300 Seed Fund

Seed fund recipient from City University of Hong Kong's flagship innovation initiative, providing dedicated funding for our development of AI-driven offensive cybersecurity capabilities.

HK Police Force — Cyber Security Professional Awards

Our founder was named in the 2025 Cyber Security Professional Awards by the Hong Kong Police Force's Cyber Security and Technology Crime Bureau, recognising his cybersecurity expertise and the work delivered through Next Security.

Ready to put proven offensive cybersecurity expertise behind your defences?

Schedule a scoping call with our specialists today. We will walk you through how we work, what an engagement looks like, and how the depth behind our credentials translates into measurable outcomes for your organisation.