OnyxTrace: Objective Insight and Grey Teaming

OnyxTrace is a boutique infosec firm founded on a simple observation: most security is based on technical checklists, not the complex reality of how organisations actually operate. Where many vendors focus on finding technical flaws to sell remediation, we provide clarity and do not sell fixes. We focus exclusively on delivering objective insight into your true exposure. We partner with organisations that want to understand how their people, processes, and financial structures can be exploited, moving far beyond standard compliance. Our entire methodology is designed for a more fundamental purpose: To test your assumptions, not just your infrastructure.

Our unique approach is Grey Teaming, which moves beyond technical checklists and established frameworks like ISO or MITRE ATT&CK. True resilience begins with seeing the world through the eyes of a determined adversary. Instead of acting as outside consultants, we embed within your team to uncover threats collaboratively. This allows us to combine an attacker's creativity with deep insider context, revealing overlooked vulnerabilities. Our investigations focus on four core areas: Insider Threats and Integrity, Exploiting Process Gaps, Uncovering Hidden Risks in Contracts and Commitments by applying an adversary’s mindset, and testing human and physical defences via Low-Tech, High-Impact Attacks (such as social engineering). OnyxTrace acts as your sparring partner in a continuous dialogue, we are based in The Hague, The Netherlands.

OnyxTrace

Org chart

Teams

Offices