Tessen Security
Talk to an Expert

Why Tessen Security

Built around an attacker’s perspective.

We combine expert-led penetration testing with recurring automated and AI-assisted external assessments, vulnerability triage, and technical control validation. Each engagement is scoped to the relevant systems and designed to turn security findings into practical next steps.

  1. 01

    Attack paths before isolated findings

    We evaluate how weaknesses combine across applications, APIs, identities, workflows, and exposed systems.

  2. 02

    Exploitability before theoretical severity

    Findings are prioritized by what can be reproduced, abused, and connected to meaningful business impact.

  3. 03

    Evidence before alarm

    Reports are written to support decisions, remediation, and retesting without inflated urgency.

  4. 04

    Technical clarity before volume

    We reduce noise so security and engineering teams can act on the work that changes risk.

Leadership

Led by operators with offensive-security depth.

Tessen Security is led by founders with complementary business and technical responsibilities. Our technical methodology is informed by published vulnerability research and public acknowledgments of individual security work.

CEO & Co-Founder

Samy Ennkhaili

Samy leads company direction, client relationships, and the operational discipline required to deliver clear offensive-security engagements for business and technical stakeholders.

CTO & Co-Founder

Tarek Bouali

Tarek leads technical methodology and research. His public security work includes documented vulnerability research and responsible disclosure activity affecting widely used technology.

Research experience behind the work.

Our technical team includes researchers whose individual work has identified critical vulnerabilities and helped resolve complex security cases involving these organizations:

  • Twitter
  • Sony
  • IBM
  • Google
  • Ford
  • PayPal
  • Adobe
  • Amazon
26,880+vulnerability reports evaluated and triaged

These are the researchers’ individual achievements, not a list of Tessen Security clients.

Core coverage

Where our work typically focuses.

  • Web applications
  • APIs
  • Authentication
  • Authorization
  • Business logic
  • Cloud-connected systems
  • Attack paths
  • Security controls
  • Vulnerability validation