About
Built to do the work, not to sell it.
Secure Threads is a UK security firm specialising in offensive security: penetration testing, and managed triage for bug bounty and disclosure programmes. It was founded by Sai Pranav Koochana.
Why we exist
The security problems we get called into are rarely exotic. They are the unglamorous ones nobody owns: a bug bounty queue nobody has time to read, scan findings that never got prioritised, a design decision made three years ago that nobody wrote down. Solvable, sitting there, waiting for it to be someone's job.
Secure Threads exists to be that someone. We do the finding, and we do the part after the finding, because it is the second half that tends to get skipped.
What we do
Two things above all: managed triage for bug bounty and vulnerability disclosure programmes, and manual penetration testing. Around those sit governance and compliance work, security architecture, vulnerability management and advisory.
We keep the practice deliberately focused. You scope the work with us and you stay with us.
Background
Our people have designed, launched and run bug bounty and disclosure programmes from nothing for multiple organisations, and deliver manual penetration testing across applications, APIs, networks and cloud. That work has been delivered across a wide range of industries, much of it in regulated environments where the cost of getting it wrong is not only technical.
That work has included threat modelling and software supply chain risk alongside testing, and running programmes day to day until the client was ready to bring the work in house. Roles have included Technical Security Lead at Cyber Industries, now a partner, and Security Consultant at Cyberwhat.
How we work
- 01Collaborative and clear.We work alongside your teams and deliver security guidance you can act on, without burying it in jargon.
- 02Expert and accessible.Security requirements translated into practical decisions your team can act on, aligned with recognised standards.
- 03Support until the fixes land.Beyond the report: debriefs, prioritised remediation roadmaps and ongoing guidance until the fixes land.
Partners and clients
We partner with firms whose work complements ours, and we name our clients rather than hiding behind logos we cannot show.
Partner
Cyber Industries (opens in a new tab)A cyber security consultancy based in the Republic of San Marino. We have worked alongside them for over a year supporting enterprise clients on web and network security engagements. We are open to further partnerships where the work fits.
Client
PharmaQuant Insights (opens in a new tab)Ongoing engagement under a master services agreement covering web and network penetration testing and ad hoc VAPT.
Secure Threads Limited, registered in the United Kingdom.