Free threat hunts for small and mid-sized businesses

We find the threats your security tools miss.

Antivirus, firewalls and email filters stop the obvious attacks. Skilled attackers are built to slip past them. We hunt for the quiet signs of compromise already inside your environment.

The hunt is free. You only pay if we find something and you want it fixed.

  • Department of Defense contracting
  • Previously held a U.S. security clearance
  • Multiple industry certifications
  • Third-party and contractor engagement experience

How it works

Four steps, and the first three are free

A human-led search for what's already inside your environment, with no commitment until we've shown you the evidence.

  1. 01

    Request

    Send us a short request. There is no cost and no obligation.

  2. 02

    Hunt

    We search sign-ins, endpoints, email and cloud activity for what your tools missed.

  3. 03

    Report

    You get a plain-language report with recommendations. It is free either way.

  4. 04

    RemediateOnly if needed

    If we find malicious activity, we agree on the fee and scope before any remediation starts.

Pricing

Free to look. You only pay if we find something.

The hunt is pro bono

We search your environment at no cost and with no obligation. Catching attackers early matters more than billing for the search.

Nothing found

You get a plain-language report and practical recommendations, and you owe nothing.

Malicious activity found

We show you the evidence and agree the scope and fee before any remediation starts. You decide whether to go ahead.

About

Independent, experienced and mostly pro bono

HuntForged Security is an independent practice. Our background spans Department of Defense contracting, cleared environments, multiple industry certifications and third-party contractor engagements. Most of our work is pro bono, because finding attackers early matters more than billing for the search.

See our services

Who it's for

Built for businesses without in-house security

No security staff

You rely on an IT provider or a small internal team that keeps systems running but doesn't have time to hunt for intruders.

Something feels off

Odd sign-ins, unexpected emails sent from your accounts, or a vendor warning. You want a clear answer, not guesswork.

Clients and insurers are asking

You need evidence that your environment has been checked by someone who knows what attacks actually look like.

Latest threat hunts

What we're finding

All threat hunts

New write-ups are on the way. Follow the RSS feed to get them first.

Find out what's hiding in your environment

Tell us a little about your business. The threat hunt costs nothing, and you only pay if we find something and you want it fixed.

Submit a threat hunt request