Canary Trap, based in Mississauga, Ontario, focuses on offensive security work, with penetration testing at the center of its practice. Services span external vulnerability assessment and penetration testing, internal network penetration testing, web and mobile application testing, API penetration testing, wireless security assessment, and OT penetration testing, giving organizations coverage across traditional IT infrastructure, connected applications, and operational technology environments.
Beyond core penetration testing, the agency runs social engineering vulnerability assessments, secure code review, physical security assessment, and reviews of Microsoft 365 security controls and cloud configurations. Red and purple team exercises extend testing into simulated adversarial engagements, while cybersecurity incident management planning helps organizations prepare response processes before an incident occurs. Penetration Testing-as-a-Service (PtaaS) delivers this testing on an ongoing service basis rather than as a one-off engagement, and AI penetration testing addresses emerging systems built on machine learning models.