Futurum Risk helps organisations find the weaknesses in their systems before an attacker does, and establish what happened when a breach, a cyber attack or a cryptocurrency fraud has already taken place.
Our training, consultancy and cyber security arm carries out vulnerability assessments and penetration tests, responds to security incidents and preserves the digital evidence, while our investigations and intelligence arm identifies the people, companies and assets behind the activity. Testing starts with what an attacker could learn about your organisation from the outside, and forensic work is carried out so that the evidence holds up with lawyers, regulators and the courts.
For more than a decade, law firms, financial institutions and government agencies have trusted Futurum Risk with their most sensitive investigations. Those investigations have shown us how organisations are targeted and how evidence is lost, and we bring that knowledge to every security test and digital investigation we carry out.
Finding the weaknesses in your networks and web applications and testing which of them pose a real risk, without taking any of your systems offline. A vulnerability assessment identifies known weaknesses and ranks them by risk. A penetration test goes further, testing selected weaknesses under controlled conditions to show how far an attacker could get. Every service is offered at Essential, Standard and Advanced levels, with a retest included at each.
1) Vulnerability Assessment:
2) Network Penetration Testing:
3) Web Application Penetration Testing:
4) Vulnerability Monitoring:
When a breach, a ransomware attack, data theft or suspected wrongdoing by staff comes to light, we contain the incident to limit the damage, then recover and analyse the evidence from computers, phones, servers and cloud accounts. That tells you how it happened, who was responsible and what was taken or affected. Evidence is preserved with a documented chain of custody, so it can support disciplinary action, legal proceedings or a report to a regulator or the police.
1. Incident Response:
2. Digital Evidence Acquisition & Preservation:
3. Forensic Analysis & Investigation:
4. Internal Investigations Support:
5. Reporting
When cryptocurrency or other digital assets have been stolen, lost to fraud or moved through a compromised wallet or exchange, we trace the funds across blockchains to establish where they went and who controls the wallets that received them. That covers theft, investment scams, NFT and decentralised finance fraud, and smart contract attacks. Our findings are set out as evidence that can support recovery through exchanges, the courts or law enforcement, and we can review smart contracts for weaknesses before launch.
1. Cryptocurrency Transaction Tracing & Analysis:
2. Stolen Crypto Asset Recovery Support:
3. NFT & DeFi Fraud Investigation:
4. Smart Contract Security Incident Investigation:
5. Exchange Compromise & Wallet Security Analysis:
6. Dark Web Monitoring:
If you suspect a breach or are dealing with an attack now, call or WhatsApp us on +852 7073 1512. If you want to know where your systems are exposed before anything happens, tell us about your organisation, and we will recommend the right service and send you a proposal.
Our analysts work with specialist and in-house tools and extensive data access to test systems, preserve and analyse digital evidence, and trace activity across networks, devices and blockchains.
Forensic imaging and analysis of computers, mobile devices, servers and cloud accounts
Tracing transactions and wallets across public blockchains
Immediate queries across breached data and public and closed fraud databases
Every engagement, from a security test to an incident response or a cryptocurrency trace, follows the same five stages.
1. Customised Cyber Investigation Plan
Each engagement begins with an understanding of your systems, the threats you face and what you need to achieve. We shape the approach around your security needs, legal considerations and risk profile.
2.Authorisation & Data Acquisition
Scope and rules of engagement are agreed before any testing begins. We then collect technical data from endpoints, networks, cloud environments or blockchains, depending on the case, and handle it securely and in confidence.
3. Forensic Analysis & Vulnerability Correlation
Data is forensically preserved and analysed to identify signs of compromise, attack routes, weak configuration and fraudulent activity, with findings checked across sources from internal logs to on-chain transactions.
4. Risk Impact & Attribution Assessment
We assess the operational, reputational, legal and financial impact of what we find and, where the case requires it, link activity to known actors, internal users or external parties.
5. Evidential Reporting & Strategic Guidance
Every engagement ends with a clear, structured report of findings, evidence and recommended actions, written for its purpose, from internal decisions to legal proceedings and regulatory response.
If you want to find weaknesses before an attacker does, start with a vulnerability assessment or penetration test. If something has already happened, digital forensics and incident response will establish what took place. If cryptocurrency has been stolen or misused, a Web3 investigation will trace where it went. We recommend the right service at the initial consultation.
A vulnerability assessment identifies the weaknesses in your systems and ranks them by risk. A penetration test goes a step further and tests selected weaknesses under controlled conditions, so you know which ones are a real risk and how far an attacker could get.
No. Anything that could reasonably cause downtime is excluded, testing windows are agreed with you, and if a system shows any sign of strain, we stop and let you know.
Absolutely. We trace transactions across blockchains, investigate NFT and DeFi scams, audit smart contracts, and analyse compromised wallets or exchanges. We also monitor the dark web for related threats.
Yes. All work is carried out within the law of each jurisdiction involved, and your data and business information remain confidential throughout.
Yes. Every investigation is tailored, whether you’re responding to an incident, assessing risk pre-transaction, or conducting due diligence on a blockchain project.
We collect and preserve evidence from the systems, devices and accounts involved, analyse it to establish what happened and how, and set out our findings in a report. Chain of custody is maintained throughout, so the evidence can be relied on in legal proceedings.
Yes. Our reports are suitable for litigation, regulatory proceedings and law enforcement referrals, and we regularly work alongside legal counsel during incident response and internal investigations.
Yes. We provide evidential reporting suitable for use in litigation, regulatory proceedings, or law enforcement referrals, and we often work alongside legal counsel during incident response or internal investigations.
Futurum Risk works through two arms. Our investigations and intelligence arm carries out due diligence, investigations and screening. Our training, consultancy and cyber security arm delivers security testing, digital forensics and cryptocurrency investigations.
We work across finance, legal, technology, manufacturing, healthcare, energy, and emerging Web3 markets, tailoring our expertise to the needs of each sector.