Edgetek ApS is young. The practice behind it is not. This is how a side project securing phone calls for a handful of people became a security company in Copenhagen, run by a team that has worked together for most of those years.
Our first security work was protecting voice over IP for a small number of people who could not afford to have their calls listened to. Encrypted SIP, hardened PBX servers, locked-down handsets, and a lot of time spent thinking about how we would attack it ourselves. That habit — attack it first, then defend it — has never left us.
A phone system is only as safe as the server it runs on, so the work moved to the infrastructure behind it: IP servers, hosting, firewalls, patching, monitoring. We learned to run systems we had hardened ourselves, for people who would notice immediately if anything went wrong. That is where our secure-hosting discipline comes from.
Clients started asking us to test things beyond their phones: web applications, APIs, networks, cloud environments, the laptops and mobiles their staff carried. Penetration testing and vulnerability assessment became the core of what we do. From the first engagement we kept a database: for every technology we met, what to test, what we found, what was noise. Ten years later that database runs our scanner, our AI agent and our own hands. Along the way we took part in security research programmes and hacking competitions run by Apple, Google and others, because testing yourself against the hardest targets is the only way to stay sharp.
A large part of our history is work for high-net-worth individuals: their phones, their VoIP, their home and travel networks, the devices their families use. That work taught us discretion as a default, not a feature. It is also why you will never find a client name or logo on this site. The people who trust us with their security do not want to be a case study.
In late 2024 we decided to stop treating this as the thing we did on the side and run it as a business. Edgetek ApS was founded in Copenhagen with three services that come straight out of that history: penetration testing, secure hosting of systems that must not fail, and AI security for the chatbots and agents companies are now wiring into their data. We also build our own tools, including FileSanitizer and the AI agent that assists our penetration tests.
Offensive security, penetration testing and secure infrastructure. Runs client engagements and builds the reporting and web side of our tooling. On the attacking side of VoIP, servers and applications since the beginning.
Offensive security, penetration testing and secure infrastructure. Builds EdgeTester and the scanning engines behind our work. On the attacking side of VoIP, servers and applications since the beginning.
We do not trust a defence we have not tried to break. Every system we run has been tested by us the way an attacker would.
We publish no client names, no logos, no war stories with identifying details. If you need a reference, we ask the client first.
A report nobody acts on is worthless. We would rather fix the hole and keep the system running than hand over a PDF and leave.
Findings are written for the person who has to decide, not to impress other security people. Severity, impact, fix. In that order.
You talk directly to the specialists who do the work. Tell us what keeps you up at night and we will tell you honestly whether we can help.
