Skip to content
Cooper & Co.

We break in. Then we help you fix it.

Cooper & Co. is a Nashville consultancy for penetration testing, custom software, and IT infrastructure. We work with small teams that don't have their own security or IT staff.

Email us See services
Sample report

External network & web app test

Findings by severity

  • Critical 2
  • High 5
  • Medium 9
  • Low 6
Fixed and retested 18 / 22
Critical

Admin panel open to the internet with default credentials. Fix: put it behind the VPN and change the password.

Services

Hire us for one of these or all of them.

Penetration testing

Hands-on testing by an OSCP-certified tester, with a report that explains how to fix each issue.

  • External and internal network tests
  • Web application tests
  • Vulnerability validation
  • Remediation report
Learn more about penetration testing

Custom software

Software for the problems off-the-shelf tools don't solve, reviewed for security before it ships.

  • Internal tools and dashboards
  • Workflow automation
  • Web apps and APIs
  • Integrations
Learn more about custom software

IT infrastructure

Remote and on-site help, as a one-off project or ongoing.

  • Hardware purchasing and setup
  • Network setup and troubleshooting
  • Endpoint management
  • Dealing with vendors
Learn more about it infrastructure

Who does the work

Cooper & Co. is run by Tyler Cooper, an OSCP-certified security consultant who has also worked as a software engineer and on the help desk for a national retailer.

The person who answers your email is the person who does the work.

More about us

How an engagement works

  1. 01

    Email us

    Tell us what you need. It's fine if you're not sure yet.

  2. 02

    Scoping call

    We agree on what the work covers and when it needs to be done, then send a written proposal with the price.

  3. 03

    The work

    We send updates as we go, so you're never left waiting to hear back.

  4. 04

    Debrief

    We walk your team through the results and stay available afterward.

Questions

What do we get at the end of a penetration test?

A written report with evidence and fix instructions for each finding, plus a short summary for leadership. We go through it with your team on a call and can retest once you've made fixes.

We need a pentest for SOC 2, HIPAA, or a customer. Can you help?

Yes. Tell us what's requiring the test and we'll scope it to match.

Do you work with small teams?

Yes, that's mainly who we work with.

How is pricing handled?

We quote each job after the scoping call. You get the price in writing before any work starts.

Do you work on-site?

Yes. We're in Nashville and can come on-site when a job needs it. We also work remotely with clients elsewhere.

Who owns the software you build?

You do. The code lives in your repository, with documentation.