About Kulkan
Offensive Security Experts Who Think Like Real Attackers
About Kulkan
Offensive Security Experts Who Think Like Real Attackers
About Kulkan
Offensive Security Experts Who Think Like Real Attackers
Who We Are
25+ years of experience in penetration testing
Kulkan is a boutique penetration testing firm with over 25 years of offensive security expertise. Based in Buenos Aires, Argentina, we operate globally as a trusted security partner for multiple US and Latin American organizations.
Our team leverages their attacker mindset to uncover high-impact vulnerabilities, delivering context-aware assessments, compliance-friendly reports, and remediation support to secure web and mobile applications, network and Wi-Fi environments, cloud and on-premise infrastructure, and AI/LLM implementations.
Talk with our experts
25+ years of experience in penetration testing
Who We Are
Kulkan is a boutique penetration testing firm with over 25 years of offensive security expertise. Based in Buenos Aires, Argentina, we operate globally as a trusted security partner for multiple US and Latin American organizations.
Our team leverages their attacker mindset to uncover high-impact vulnerabilities, delivering context-aware assessments, compliance-friendly reports, and remediation support to secure web and mobile applications, network and Wi-Fi environments, cloud and on-premise infrastructure, and AI/LLM implementations.
Talk with our experts
25+ years of experience in penetration testing
Who We Are
Kulkan is a boutique penetration testing firm with over 25 years of offensive security expertise. Based in Buenos Aires, Argentina, we operate globally as a trusted security partner for multiple US and Latin American organizations.
Our team leverages their attacker mindset to uncover high-impact vulnerabilities, delivering context-aware assessments, compliance-friendly reports, and remediation support to secure web and mobile applications, network and Wi-Fi environments, cloud and on-premise infrastructure, and AI/LLM implementations.
Our Purpose:
Our Purpose:
Our Purpose:
Improve Your Security Posture
Improve Your Security Posture
Improve Your Security Posture
We deliver attacker-led assessments for companies that expect more than a vulnerability checklist; they expect a team of experts that understands their architecture and use cases, and thinks like real attackers to detect how they could be compromised within their own logic. We also guide your team through the remediation process, helping you close those gaps before a real attacker exploits them.
We deliver attacker-led assessments for companies that expect more than a vulnerability checklist; they expect a team of experts that understands their architecture and use cases, and thinks like real attackers to detect how they could be compromised within their own logic. We also guide your team through the remediation process, helping you close those gaps before a real attacker exploits them.
Core Values
Core Values
Core Values
Where We Stand Apart
Where We Stand Apart
Where We Stand Apart
Full-time Security Experts
Full-time Security Experts
Every engagement is staffed by dedicated, full-time offensive security experts. Having an in-house team, trained and aligned around the same methodology, lets us stay fully customer-centric and maintain a consistent quality standard across every project.
Tailored Scoping
Tailored Scoping
Each project is scoped from the ground up based on the client's architecture, use cases, and most critical risk areas. That flexibility is backed by internal playbooks, technical standards, and our own training platform (Kulkan Academy), the result of over two decades of hands-on assessments.
Attacker Mindset
Attacker Mindset
We approach every engagement the same way an adversary would target your business: mapping business logic and chaining findings into real impact. We use automation where it genuinely adds value, and rely on expert human validation to uncover the deep, hard-to-find vulnerabilities that live in that logic.
Constant Training
Constant Training
Our consultants train continuously through Kulkan Academy, our internal platform for hands-on technical development, keeping their skills sharp against real-world attack techniques. We also share knowledge through internal sessions (K-Talks), turning individual research, expertise, and success cases into collective knowledge.
Full-time Security Experts
Every engagement is staffed by dedicated, full-time offensive security experts. Having an in-house team, trained and aligned around the same methodology, lets us stay fully customer-centric and maintain a consistent quality standard across every project.
Tailored Scoping
Each project is scoped from the ground up based on the client's architecture, use cases, and most critical risk areas. That flexibility is backed by internal playbooks, technical standards, and our own training platform (Kulkan Academy), the result of over two decades of hands-on assessments.
Attacker Mindset
We approach every engagement the same way an adversary would target your business: mapping business logic and chaining findings into real impact. We use automation where it genuinely adds value, and rely on expert human validation to uncover the deep, hard-to-find vulnerabilities that live in that logic.
Constant Training
Our consultants train continuously through Kulkan Academy, our internal platform for hands-on technical development, keeping their skills sharp against real-world attack techniques. We also share knowledge through internal sessions (K-Talks), turning individual research, expertise, and success cases into collective knowledge.
AI Adoption
We Tailor AI to Your Business, Without Losing the Human Edge
We layer AI on top of two decades of proven methodology, to strengthen our processes, always guided by human judgment and the attacker mindset that defines our work. We offer a 3-tier model to align AI usage with your organization's requirements: no AI, locally-hosted AI, or frontier AI models, depending on what your business needs.
We Tailor AI to Your Business, Without Losing the Human Edge
AI Adoption
We layer AI on top of two decades of proven methodology, to strengthen our processes, always guided by human judgment and the attacker mindset that defines our work. We offer a 3-tier model to align AI usage with your organization's requirements: no AI, locally-hosted AI, or frontier AI models, depending on what your business needs.
We Tailor AI to Your Business, Without Losing the Human Edge
AI Adoption
We layer AI on top of two decades of proven methodology, to strengthen our processes, always guided by human judgment and the attacker mindset that defines our work. We offer a 3-tier model to align AI usage with your organization's requirements: no AI, locally-hosted AI, or frontier AI models, depending on what your business needs.
Ready to see how your systems would hold up in realistic attack scenarios?
Ready to see how your systems would hold up in realistic attack scenarios?
Get in touch and let's scope your next assessment.
Get in touch and let's scope your next assessment.
Ready to see how your systems would hold up in realistic attack scenarios?
Get in touch and let's scope your next assessment.
© 2011-2026 Kulkan Security