Peter Wood - Partner (Chief of Operations)

Peter founded First Base Technologies in 1989 as a vendor-independent consultancy. He has hands-on technical involvement in the firm on a daily basis, working in areas as diverse as penetration testing, social engineering and skills transfer. He is also a world renowned security evangelist, speaking at many conferences and seminars on ethical hacking techniques and Internet security. Peter is also our lead consultant for on-site penetration testing.

Didi Barnes - Partner (Head of R&D)

Didi joined the firm in 1997. She developed our testing methodologies, and is lead consultant for wireless security and has written several white papers on this and other security topics. She is also responsible for our in-house systems, in-house security and DR Planning; designing our web sites and marketing materials; and manages the business and finance as well!

Keiron Northmore - Partner (Head of Technical Services)

Keiron joined the firm in 2001. He is responsible for managing our staff and penetration testing team. He developed our robust penetration testing methodology, which he is responsible for reviewing and updating - adding new exploits and methodologies as they are discovered - and has personally identified several unique attack techniques. Keiron has been involved in developing our Oracle database security testing methodology and regularly conducts network penetration tests and network discovery audits at client sites.

Andy Wilson - Account Manager

Andy previously managed large accounts in both the mobile telecommunications and paper supply industries, making him an ideal candidate to look after the day-to-day interaction with our clients. Andy also has a strong aptitude for social engineering. He has conducted very successful social engineering exercises both by phone and in person, compromising perimeter security and gaining network access.

Vishal Garg - Senior Penetration Tester

Vishal has developed our web application testing methodology and is responsible for enhancing it to include new attack vectors as they are discovered. He applies his innovative style to identify new attack techniques and to exploit vulnerabilities in our test lab before making them part of our testing methodology. He interacts with our clients on a regular basis to discuss their testing requirements and to offer his expert advice during post-test discussions. He also undertakes on-site testing.

Mike McLaughlin - Penetration Tester

Mike's focus is external web application testing and external penetration/network testing. Mike works in collaboration with Vishal Garg, developing testing methodologies and discovering new attack vectors.

Mike is responsible for our in-house test lab and testing tools. He interacts with our clients on a regular basis to discuss their testing requirements and to offer his expert advice during post-test discussions. He also undertakes on-site testing.

Rob Shapland - Penetration Tester

Rob brings a wide experience of web application and Windows application quality assurance testing to the team. He has an in-depth understanding of applications and testing methodologies.

Rob's focus is on external penetration testing and network penetration testing. He also maintains and develops our in-house security vulnerability database, which ensures that our tests and your reports are accurate and relevant.

Tony Golding - Senior Consultant

Tony focuses on IT security in networks and the Internet. His experience in ISO 27001 (Information Security) and ISO9000 (Quality) have made him our key consultant in these areas. Tony is our lead consultant for on-site network audits and Microsoft Windows and Active Directory.

Steve Rimell - Senior IT Auditor

Steve specialises in the more technical aspects of information systems audit, having extensive knowledge of the security and control of UNIX, Oracle, Windows and networking environments such as TCP/IP. He has also presented hands-on training courses in these subjects at a variety of venues in the UK and overseas.

Ian Rawlings - Senior Consultant

Ian's main role in the team is conducting penetration tests and IT security audits on site. He has tested networks of all sizes both in government and commercial sectors for protective markings up to "Secret" level. He also carries out application testing, wireless testing, war dialling, social engineering and architecture reviews.

His experience as a CESG CHECK team leader and his in-depth UNIX skills are a valuable addition to our penetration testing team.