Hedgehog Security

Hedgehog Security is a UK-based cybersecurity firm that provides penetration testing services, with a focus on wireless (Wi-Fi) security assessments for corporate environments. The company's core offering is structured wireless penetration testing, which follows a multi-phase methodology: - Passive wireless reconnaissance (capturing Wi-Fi frames without transmitting) - Wireless environment mapping (identifying SSIDs, access point locations, signal range, client devices) - Active testing and exploitation (handshake capture, evil twin attacks, rogue RADIUS deployments) - Post-association testing (assessing what internal resources are reachable after gaining wireless access) - Reporting with prioritised remediation guidance Hedgehog Security tests a range of wireless configurations including WPA2-Personal (PSK), WPA2-Enterprise (802.1X/RADIUS), WPA3-Personal (SAE), WPA3-Enterprise, and open/captive portal networks. Attack techniques employed include four-way handshake capture, PMKID harvesting, offline dictionary and brute-force cracking, and evil twin/rogue RADIUS attacks targeting misconfigured certificate validation on client devices. The company's target market includes small to large organisations that operate corporate wireless networks. Their engagements are scoped via introductory calls and culminate in detailed reports documenting discovered attack paths, exploitation evidence, and remediation recommendations. The content on their website is educational in nature, explaining wireless attack surfaces, corporate wireless architectures, and specific attack vectors in technical depth, positioning the firm as a technical consultancy focused on offensive security testing of wireless infrastructure.