About us
Security expertise, backed by real engineering.
Nehals Limited is a UK-based IT security and web development company. We have worked in IT since 2013, helping businesses protect their brands, systems and data from cyber attacks while building fast, secure websites.
Who leads the work
Every engagement is led by Sajjan Singh Nehal — a penetration tester with 3+ years of security experience across the UK and Canada, a year of system administration, and three years of full-stack development. That combination means vulnerabilities are not just found; they come with practical, developer-ready remediation guidance.
Certifications
- CREST Registered Penetration Tester (CRT)
- CREST Practitioner Security Analyst (CPSA)
- OffSec Certified Professional (OSCP)
Education
- MSc in Cyber Security
- Bachelor's in Computer Application
Recognition
- 5 cyber security Halls of Fame: BlackBerry, AT&T, OnePageCRM, MCProHosting, Constant Contact
- Research published in Springer Nature: "Penetration Testing for the Cloud-Based Web Application"
- Active researcher on Bugcrowd and HackerOne, and Hack The Box
- Technical write-ups on Medium
Verified credentials
Every badge links to its official verification page.
Technical skills
Security
- Web App Pen Testing
- API Testing
- Android Testing
- Cloud Pen Testing
- Active Directory
- XDR & SIEM
- Vulnerability Management
- Privilege Escalation
- Source Code Review
- Report Writing
Languages & Databases
- HTML
- CSS
- JavaScript
- TypeScript
- PHP
- Node.js
- React.js
- Golang
- Python
- Bash
- Java
- SQL
- MySQL
- Postgres
- GraphQL
- MongoDB
Platforms & Cloud
- AWS
- Azure
- Linux/Unix
- Windows
- macOS
- Docker
- Active Directory
- ESXi
- NAS
- VPN
Core Tools
- Burp Suite
- Nmap
- Wireshark
- Metasploit
- Gobuster
- Postman
- Hydra
- Hashcat
- John the Ripper
- Ghidra
- Jadx
- MobSF
- Wazuh
AWS Services
- EC2
- Lambda
- S3
- RDS
- DynamoDB
- IAM
- VPC
- Route 53
- CloudFront
- CloudTrail
- CloudWatch
- Cognito
- KMS
Azure Services
- Virtual Machines
- Azure SQL
- Cosmos DB
- Storage Accounts
- Virtual Networks
- Defender for Cloud
- Monitor
- Azure Migrate