# Reconix

> Reconix is a penetration testing and offensive security company based in Bangkok, Thailand, founded in 2022. Services cover manual penetration testing, vulnerability assessment, red teaming, smart contract audits, and AI/LLM security testing, with reports formatted for Thai regulators (BOT, PDPA/PDPC, SEC, OIC, NCSA) and international frameworks (ISO 27001, PCI DSS). The team has delivered 500+ projects since 2022, including Thailand's tier 1 banks, and holds CISSP, OSCP, OSCP+, OSWE, OSEP, eWPT, eMAPT, and CRTA certifications. Competition record includes Thailand Cyber Top Talent wins in 2021, 2022, 2024, and 2025.

Content is bilingual: English pages at reconix.co, Thai pages under reconix.co/th/.

## Services

- [Penetration Testing](https://reconix.co/services/penetration-testing/): Manual penetration testing following the PROVE methodology (Plan, Run, Orient, Verify, Evidence)
- [Web Application Penetration Testing](https://reconix.co/services/web-application-penetration-testing/): OWASP WSTG-aligned testing for web apps and APIs
- [Mobile Application Penetration Testing](https://reconix.co/services/mobile-application-penetration-testing/): iOS and Android testing following OWASP MASTG, including mobile banking apps under BOT requirements
- [Network Penetration Testing](https://reconix.co/services/network-penetration-testing/): Internal and external infrastructure testing including Active Directory attack paths
- [Cloud Penetration Testing](https://reconix.co/services/cloud-penetration-testing/): AWS, Azure, and GCP security assessment
- [Vulnerability Assessment](https://reconix.co/services/vulnerability-assessment/): Scanning with expert verification, false positives removed, risk-based prioritization
- [Security Audit](https://reconix.co/services/security-audit/): Umbrella engagement routing to penetration testing, vulnerability assessment, or compliance review
- [Red Teaming](https://reconix.co/services/red-teaming/): MITRE ATT&CK-aligned adversary simulation
- [AI Red Teaming](https://reconix.co/services/ai-red-teaming/): LLM application testing covering prompt injection, jailbreaks, and tool abuse, mapped to OWASP LLM Top 10
- [Smart Contract Audit](https://reconix.co/services/smart-contract-audit/): Web3 and DeFi security from the former Inspex team, covering Ethereum, BNB Chain, Solana, and Bitkub Chain
- [Secure Code Review](https://reconix.co/services/secure-code-review/): Source code analysis for critical applications
- [Cybersecurity Consulting](https://reconix.co/services/cybersecurity-consulting/): Compliance gap assessment and security program advisory
- [Phishing Simulation](https://reconix.co/services/phishing-simulation/): Authorized phishing campaigns with Thai-language lures and department-level click and report metrics
- [Security Awareness Training](https://reconix.co/services/security-awareness-training/): Role-based training delivered by active penetration testers, in Thai or English

## Compliance Guides

- [BOT Penetration Testing](https://reconix.co/compliance/bot-penetration-testing/): Bank of Thailand penetration testing requirements for financial institutions
- [BOT Mobile Banking Security](https://reconix.co/compliance/bot-mobile-banking-security/): BOT requirements for mobile banking applications
- [PDPA](https://reconix.co/compliance/pdpa/): Thailand Personal Data Protection Act Section 37 security measures
- [ISO 27001](https://reconix.co/compliance/iso-27001/): Penetration testing evidence for ISO 27001 certification audits
- [PCI DSS](https://reconix.co/compliance/pci-dss/): Requirement 11.4 penetration testing for cardholder data environments
- [SEC Penetration Testing](https://reconix.co/compliance/sec-penetration-testing/): Thai SEC requirements for digital asset businesses
- [OIC Cybersecurity](https://reconix.co/compliance/oic-cybersecurity/): Office of Insurance Commission IT risk requirements for insurers
- [NCSA Web Security](https://reconix.co/compliance/ncsa-web-security/): Thailand National Cyber Security Agency requirements for critical information infrastructure

## Key Guides

- [Penetration Testing Pricing Guide](https://reconix.co/pricing-guide/): Cost ranges for penetration testing services in Thailand by service type
- [Top Penetration Testing Companies in Thailand 2026](https://reconix.co/blog/top-penetration-testing-companies-thailand/): Honest comparison of real Thai pentest firms, grouped by provider type
- [Vulnerability Assessment vs. Penetration Testing](https://reconix.co/blog/va-vs-pentest/): What each engagement covers and what Thai compliance frameworks require
- [ISO 27001 Penetration Testing Guide](https://reconix.co/blog/iso-27001-penetration-testing-guide/): Mapping pentest and vulnerability scan evidence to ISO 27001 controls
- [Pentest คืออะไร (Thai)](https://reconix.co/th/blog/what-is-pentest-th/): Thai-language introduction to penetration testing
- [ราคา Pentest ในไทย (Thai)](https://reconix.co/th/blog/pentest-cost-thailand-guide-th/): Thai-language pricing guide with per-service ranges
- [VAPT Guide (Thai)](https://reconix.co/th/blog/vapt-guide-th/): Thai-language guide to combined vulnerability assessment and penetration testing

## Company

- [About](https://reconix.co/about/): Team, certifications, and competition record
- [Contact](https://reconix.co/contact/): Scoping requests and consultations; critical findings during engagements are reported the same day