About London HQ · global partners · practitioners who ship the work, not forward it. Work with us
About Secure Purple

Cybersecurity that protects the business, not just the checklist.

We're a London-headquartered cybersecurity team delivering offensive testing, defensive operations and GRC work for businesses and startups, with regional partners across the UK, EU, Middle East, Pakistan, the US, Chile and Australia.

Who we are

A practitioner-led cybersecurity company.

Secure Purple was founded to close the gap between glossy security reports and real operational risk. We work alongside engineering and leadership teams, from regulated enterprises to early-stage startups, and deliver the kind of work we would trust with our own infrastructure.

Our approach

Depth over dashboards.

Every engagement is led by a senior practitioner. Reports are written by the person who did the testing, scoping is honest about what we saw and what we didn't, and remediations come with engineering detail, not just CVSS scores.

Our footprint

London HQ, global delivery.

From our London office we run engagements alongside vetted regional partners so clients get local language, regulatory context and on-the-ground presence, all backed by Secure Purple's methodology.

Our posture

Community is core, not a brochure page.

Our Be Internet Secure initiative, Women Cyber Safety Hackathon and Hack Hour sessions are run by the same people delivering the paid work. If we won't give back to the craft, we shouldn't charge for it.

Vision & Mission

What we're building, and why.

Vision

To be the trusted global partner for cybersecurity, recognised for the depth of our research, the standard of our delivery, and the community we support around the craft.

Mission

To deliver offensive, defensive and GRC services that let businesses operate securely in the digital age, with senior practitioners on every engagement, honest scoping, and reports you can actually action.

How we work

Four things we won't compromise on.

  • Senior-led engagements

    The person writing the report is the person doing the work. No hidden juniors, no outsourced findings.

  • Honest scoping

    We'll tell you when something is out of scope, when a smaller engagement is right, or when you don't need us at all.

  • Research, not rituals

    Our teams publish findings, run public community sessions and contribute CVEs, because the day you stop learning, you stop defending.

  • Accountable delivery

    Clear owner, clear timeline, clear deliverable. If it slips, you hear it from us first, not from a status dashboard.

Leadership & Team

The people doing the work.

A multidisciplinary team across offensive security, SOC operations, research, engineering and programme delivery.

  • Adnan Malik

    Adnan Malik

    Chief Executive Officer

  • Marcos Reis

    Marcos Reis

    Global Head

  • Amir Jamili

    Amir Jamili

    Head of Cyber Security

  • Kashif Ali

    Kashif Ali

    Program Manager

  • Khadija Zahra

    Khadija Zahra

    Security Analyst

  • Muskan Nawaz

    Muskan Nawaz

    Security Researcher

  • Muhammad Bilal Tahir

    Muhammad Bilal Tahir

    Web Engineer

  • Naina Malik

    Naina Malik

    Communication Manager

Company at a glance

The essentials.

Headquarters
128 City Road
London EC1V 2NX
United Kingdom
Email
ask@securepurple.com
Phone
+44 7447 492241
Practice areas
Offensive · Defensive · GRC · Training
Global partners
UK · EU · Middle East · Pakistan · US · Chile · Australia
Founded
Serving clients since 2022
What peers and partners say

Voices from the industry, academia and the community.

Academic curricula move slowly; the threat landscape doesn't. Secure Purple bridges that gap by bringing active practitioners directly into our classrooms.
Dr Zunera Jalil Director, School of Computer Engineering
Every engagement we've run with Secure Purple has had a community outcome layered on top of the commercial one. They don't just deliver; they invest.
Saba Kalsoom Community Manager, Fasset
Ready when you are

Tell us the scope. We'll route you to the right team.

Whether it's a pentest, a SOC uplift, an ISO 27001 push or a community partnership, we'll reply within a week with a straight answer.