CD Nuggets is an offensive cybersecurity startup founded by postgraduates holding a Master’s degree in Cybersecurity. We specialise in high-impact manual penetration testing, vulnerability assessments, and adversary simulation. Operating with a genuine attacker’s mindset, our mission is to identify and neutralise critical vulnerabilities before malicious actors can exploit them.
Our Mission: Delivering actionable, defence-grade security validation to forward-thinking organisations across Bulgaria, the UK, and Europe.
Are you passionate about offensive security and breaking complex systems? We are looking for talented penetration testers and ethical hackers driven by manual adversarial testing, web and network exploitation, and strict OPSEC standards. Join us in building a modern, high-assurance security boutique.
We are integrating advanced AI into offensive testing workflows. We seek specialists proficient with frontier models—such as ChatGPT, Anthropic Claude, and Google Gemini—as well as open-source frameworks like DeepSeek, Kimi, and Qwen. Help us build autonomous AI agents that streamline threat research and discovery.
Great technical execution requires commercial momentum. If you excel at B2B sales, commercial strategy, digital outreach, or building investor relations across Bulgaria, the UK, and the EU, let us collaborate. Help shape our trajectory and establish CD Nuggets as a trusted name in the industry.
We deliver rigorous, manual-first security assessments designed to uncover critical risks before adversaries can exploit them. Our methodologies blend deep offensive expertise with cutting-edge tooling to protect your core digital infrastructure.
We assess web platforms, client portals, and modern APIs against OWASP Top 10 risks. Our manual exploitation uncovers broken logic, authentication flaws, and injection vectors often missed by automated tools.
Comprehensive evaluations of internal, external, and hybrid cloud environments (AWS, Azure, GCP). We identify misconfigurations, weak perimeters, privilege escalation paths, and lateral movement risks.
Targeted security analysis for businesses deploying LLMs and autonomous AI agents. We test for prompt injection, insecure data pipelines, model manipulation, and API integration vulnerabilities.
We evaluate workforce resilience and technical response through tailored phishing campaigns, credential harvesting, and targeted cyber war game scenarios that simulate persistent threat actors.
Systematic baseline scanning combined with static and dynamic code reviews (SAST/DAST). We pinpoint technical flaws early in the software development lifecycle (SDLC) to reduce remediation costs.
Actionable gap assessments to align technical controls with industry frameworks and directives, including NIS2, DORA, and ISO 27001, building the foundation for defence-grade standards.
Contact our team today. Tell us about your systems if you need a penetration test, or send us your details to work with us.
