Adam Govier

Founder & Lead Consultant

Adam founded Exploitr and leads its penetration testing practice. He holds OSCP and OSCE certifications and has over 12 years' experience in penetration testing and security consulting, with a background in software development and IT administration.

Accreditations and memberships

OSCE certified consultant OSCP certified consultant
Adam Govier
Node2Shell (HTTP2Shell) Brotli Remote Code Execution (CVE-2026-111497)
Security Alerts

Node2Shell (HTTP2Shell) Brotli Remote Code Execution (CVE-2026-111497)

PHP2Shell Remote Code Execution (CVE-2026-109618, CVE-2026-109619)
Security Alerts

PHP2Shell Remote Code Execution (CVE-2026-109618, CVE-2026-109619)

How often should you get a penetration test?
Penetration Testing

How often should you get a penetration test?

Exploitr is Now a CREST Member Company, Accredited for Penetration Testing
Company News

Exploitr is Now a CREST Member Company, Accredited for Penetration Testing

Password storage: Argon2id, bcrypt, and scrypt compared
Web Application Security

Password storage: Argon2id, bcrypt, and scrypt compared

Why a once-a-year penetration test is not enough
Penetration Testing

Why a once-a-year penetration test is not enough

How to choose a penetration testing provider in the UK
Penetration Testing

How to choose a penetration testing provider in the UK

Vulnerability scanning vs penetration testing: which one do you need?
Vulnerability Management

Vulnerability scanning vs penetration testing: which one do you need?

Manual vs automated penetration testing: How to tell what you're paying for
Penetration Testing

Manual vs automated penetration testing: How to tell what you're paying for

What is network penetration testing?
Network Security

What is network penetration testing?

Assumed Breach Penetration Testing Explained
Penetration Testing

Assumed Breach Penetration Testing Explained

npm v12: Mitigating Supply Chain Attacks with New Install Controls
Supply Chain Security

npm v12: Mitigating Supply Chain Attacks with New Install Controls

How to Write a Penetration Test Report
Penetration Testing

How to Write a Penetration Test Report

Intercepting and Manipulating Firestore Streams with a Custom Burp Extension
Web Application Security

Intercepting and Manipulating Firestore Streams with a Custom Burp Extension

Alert: GitHub Investigates Internal Repository Breach via Malicious VS Code Extension
Security Alerts

Alert: GitHub Investigates Internal Repository Breach via Malicious VS Code Extension

Alert: Copy Fail Linux Local Privilege Escalation (CVE-2026-31431)
Security Alerts

Alert: Copy Fail Linux Local Privilege Escalation (CVE-2026-31431)

Alert: GitHub Bug Exposed Webhook Secrets to Recipient Endpoints
Security Alerts

Alert: GitHub Bug Exposed Webhook Secrets to Recipient Endpoints

What to Expect During a Web Application Pentest
Web Application Security

What to Expect During a Web Application Pentest

Dependency Pinning for npm: Defending Against Supply Chain Attacks
Supply Chain Security

Dependency Pinning for npm: Defending Against Supply Chain Attacks

Secure your email with MTA-STS
Email Security

Secure your email with MTA-STS

Authentication Security for SaaS Startups: What to Get Right
Web Application Security

Authentication Security for SaaS Startups: What to Get Right

Is Your Penetration Test Leaking Data to Third-Party AI?
AI Security

Is Your Penetration Test Leaking Data to Third-Party AI?

Mitigating LLMNR Poisoning Attacks
Network Security

Mitigating LLMNR Poisoning Attacks

Scoping a network penetration test
Network Security

Scoping a network penetration test

Scoping a web application penetration test
Web Application Security

Scoping a web application penetration test

OK, now it's really time to disable Net-NTLMv1
Network Security

OK, now it's really time to disable Net-NTLMv1

When Security Issues Kill the Vibe (Coding)
AI Security

When Security Issues Kill the Vibe (Coding)

What is DKIM? How DomainKeys Identified Mail Works & How to Set It Up
Email Security

What is DKIM? How DomainKeys Identified Mail Works & How to Set It Up

DMARC: how it works, setup and policy guide
Email Security

DMARC: how it works, setup and policy guide

What is SPF? Sender Policy Framework Explained & How to Configure It
Email Security

What is SPF? Sender Policy Framework Explained & How to Configure It

What is XSS? Cross-Site Scripting Explained
Web Application Security

What is XSS? Cross-Site Scripting Explained

What is SQL Injection (SQLi)?
Web Application Security

What is SQL Injection (SQLi)?

Identifying Bad Characters in Exploit Development
Exploit Development

Identifying Bad Characters in Exploit Development

Email Phishing Attacks Explained
Email Security

Email Phishing Attacks Explained

What is Password Cracking and How Does it Work?
Network Security

What is Password Cracking and How Does it Work?

Exploitr Gains CREST Pathway Status
Company News

Exploitr Gains CREST Pathway Status

What is a Red Team Engagement?
Penetration Testing

What is a Red Team Engagement?

What is penetration testing?
Penetration Testing

What is penetration testing?

What is External Attack Surface Management (EASM)?
Vulnerability Management

What is External Attack Surface Management (EASM)?

Common Vulnerability Management Challenges
Vulnerability Management

Common Vulnerability Management Challenges

Manually Implanting Backdoors in PE Files
Exploit Development

Manually Implanting Backdoors in PE Files

Using an Egghunter to Exploit Minimal Buffer Overflows
Exploit Development

Using an Egghunter to Exploit Minimal Buffer Overflows

Cyber Essentials Certified
Company News

Cyber Essentials Certified

An Introduction to Exploiting Basic Vanilla Buffer Overflows
Exploit Development

An Introduction to Exploiting Basic Vanilla Buffer Overflows

Understanding WPA/WPA2 Pre-Shared-Key Cracking
Network Security

Understanding WPA/WPA2 Pre-Shared-Key Cracking

Get a fixed-price quote for your penetration test

Our team will help you scope the right assessment for your environment and agree a fixed price before testing starts.