Planned in Ireland.
Founded in Ireland in 2022, with entities in the UK and the US. More than 250 engagements since 2023, on four continents.
Headquarters in Ireland, offices in the UK and the US, and work delivered in Mexico, Europe, Australia and New Zealand.
- Headquarters
- Offices
- Where we deliver
The DonElena Donea
Co-founder and CEO. Deloitte, Kontex and Aon before WhatsExposed. LinkedIn
Why Elena started it.
Elena co-founded WhatsExposed after watching businesses pay for a pen test, file the report and change nothing until the next one.
I did not start this to sell more pen tests. I started it because the people who could actually break in were never the ones in the room, and a PDF once a year was being called security.
So the company was built the other way round: senior, certified people on every job, findings in a live portal, and a model where IT providers can deliver it under their own name.
The people running the job.
Mark Drinan
Head of Offensive Security
Gold for Ireland at the WorldSkills Global Skills Challenge in Melbourne. Every engagement signs off through him.
John Quinn
Head of Operations
Runs scheduling, delivery and quality on every engagement.
Ardit Fetahu
Head of Partner Success and US Expansion
Started as a penetration tester. Looks after partners in six countries and leads our US growth.
Ronan Tierney
Head of Talent Acquisition
Owns how we hire: senior testers, vetted and background-checked before they touch a job.
Daniel Scragg
Team Lead, Offensive Security
OSCP, OSEP, OSWE, CRTO, eWPTX, BSCP and CREST. Won the 2021 SANReN Cyber Security Challenge.
Fehmi Berisha
Team Lead, Offensive Security
Thinks sideways, moves fast and finds the way in nobody planned for. Leads red team and physical engagements.
Melisa Mullahasani
Technical Engagement Specialist
Your platform guru. She gets you set up and makes sure you can find your way around the platform with ease.
Festim Krasniqi
Team Lead, Software Engineering
Seriously detail-oriented. He’s rebuilding the whole engine behind WhatsExposed and doesn’t let a single line slide.
How we work.
People sign it off
Certified testers lead every job and sign every report.
Depth over volume
Findings ranked by what an attacker could actually reach.
Partners first
We never go around the partner who brought us in.
Plain English
Every report reads clearly to a board member and an engineer.
The marks auditors look for.
CREST accredited for penetration testing and certified to ISO/IEC 27001:2022 and Cyber Essentials Plus.
Plan a job with us.
Tell us what you need and we’ll come back with a scope and a plan.