Offensive Security Services

Willow Tree
Security

Expert network and web application penetration testing. We find the vulnerabilities in your systems before someone else does.

Get in Touch

Who We Are

Willow Tree Security is a new firm and we're upfront about that. In our tool kit is rigorous training through TCM Security's curriculum and graduate-level coursework, a genuine curiosity about how systems fail, and a commitment to doing our work the right way. We're here to earn trust, and we do that one engagement at a time.

We stay current because the threat landscape doesn't take breaks. Between structured client engagements and independent bug bounty research, our techniques get tested against real production targets. If you want someone who's genuinely invested in understanding your environment, not just checking boxes, you're in the right place.

Our Values

  • Integrity
  • Curiosity
  • Rigor

What We Do

Hands-on offensive security through structured client engagements and active bug bounty research. We find real vulnerabilities before threat actors do.

Penetration Testing

We assess networks and web applications the way attackers actually operate. We enumerate infrastructure, exploit exposed services, and probe applications for the full spectrum of security flaws. Every engagement is manual-first and closes with a clear, prioritized remediation report.

  • External & internal network assessments
  • Lateral movement & privilege escalation
  • OWASP Top 10 & beyond
  • Authentication, authorization & API testing
  • Prioritized remediation report

Bug Bounty Programs

Alongside client engagements, we actively hunt vulnerabilities through bug bounty programs on live production systems. This keeps our skills sharp, our methods current, and our findings grounded in how real systems behave under attack.

  • Continuous vulnerability research
  • Web, API, and network targets
  • Coordinated disclosure
  • Real-world, production-tested methodology

Get in Touch

Ready to get a real look at your attack surface? Tell us about your environment and we'll scope an engagement that fits.