Who We Are
HACK KAP is an offensive-security company based in Colombo, working with clients worldwide. We break into systems on purpose, document exactly how, and show your team what to close.
What We Do
We run manual, exploit-driven security testing for businesses: web and mobile applications, cloud estates, internal networks, and dark-web exposure. Findings are proven by hand, written so your engineers can act on them, and retested once you have fixed them.
We work with clients worldwide from Colombo, and we align our methodology to OWASP, PTES, and MITRE ATT&CK so results map to the standards your auditors already use.
The Other Half of the Business
We also build hacking labs and run CTF competitions. That is not a side project. The same operators who run your engagements spend their own time breaking live challenges, and what they learn there goes straight back into client work.
Core Values
- Manual testing, never raw scanner output
- Every finding proven with a working exploit
- Reports written for the engineers who fix them
- Verification retest included in the engagement
- Aligned to OWASP, PTES, and MITRE ATT&CK
- Operators who break live challenges daily
How We Work
Offensive security delivered by the people who run it, plus the labs and competitions we build
Manual, Exploit-Driven Testing
Automated tooling maps the attack surface. People prove what is actually exploitable, by hand, on every engagement.
Findings You Can Act On
Each issue ships with reproduction steps, real impact, and a fix, written for the engineers who have to close it.
Dark-Web Exposure Monitoring
Continuous watch on leaked credentials, brand abuse, and criminal chatter. Available white-label for MSSP partners.
Verification Retest Included
Once you have remediated, we test the same paths again and confirm they are closed. The retest is part of the engagement.
Hacking Labs and CTF Arena
We build and run live challenges, open to your engineers as well as ours. It is where our own operators stay sharp.
Training Built From Real Findings
Hands-on sessions drawn from what we actually break in client engagements, not from slideware.
Our Team
The operators who run your engagements and build the challenges we all train on
Pasindu Dilshan
Founder/CEO
Expert in penetration testing, advanced persistent threats, malware analysis, and web application security with 8+ years of industry experience.
Specialties:
Indura Nawarathna
Director
Specialized in secure coding, reverse engineering, and vulnerability assessment. Focused on AI-driven security solutions.
Specialties:
Maneesha Dewmina
Director
Expert in cryptography, blockchain security, and secure software development. Focused on emerging security technologies and research.
Specialties:
Want to know what an attacker can reach?
Tell us what you are running and we will scope the right test with you. No obligation, and we will say so if you do not need one yet.
Here to train instead? Start Hacking in the labs.