Derivee is an offensive security firm and ethical hacking academy. We run real penetration tests and red team engagements against real infrastructure, and we train the operators who’ll run the next one.
We started Derivee because too many security reports read like they were written to satisfy a checkbox rather than to actually help an engineering team fix something. Every report we deliver includes reproduction steps, not just a severity score — and every engagement ends with a live debrief with the people who hold the fix, not just the people who hold the budget.
Our testers hold industry certifications including OSCP, OSCE3, OSWE, and CREST accreditations, and split their time between client engagements and building the curriculum used in Derivee Academy — so what we teach is always grounded in what we’re actually finding in the field.