Hubei XinYiAn focuses on offensive security: red team / APT simulation, penetration testing, and HVV drill support, plus a zero-to-junior cybersecurity training track. We hand you more than a vulnerability list — we help you see and fix the gap.
Red TeamPenetration TestingHVV DrillAV EvasionOSINTTraining
Core tracks: Network · Data · AI · Advisory · Training
30+
Engagements with academia / finance / energy / critical infrastructure
01Services
Services
From the attacker’s view: red team, pentest, and HVV drill assurance.
Red Team
Red Team / APT Simulation
We model real APT tactics, techniques, and procedures (TTPs) to launch targeted, end-to-end attacks against your organization — external breach, phishing delivery, privilege escalation, lateral movement, and data exfiltration — replicating a real intrusion to validate detection, response, and remediation under adversarial pressure.
End-to-end: external breach → lateral movement → objective
Deep manual pentesting for Web, App, API, internal network, and cloud. No scanner-driven noise — senior engineers dig into business-logic flaws, broken access control, and chained exploits, delivering reproducible PoCs and risk-ranked fix recommendations, plus retest closure.
Drill assurance for major events and HVV campaigns. Attacker-side surface mapping and exposure reduction; defender-side monitoring, triage, and on-call; pre-event hardening, in-event triage, post-event retrospective — helping you hold critical objectives under live adversarial pressure.
Pre-launch & runtime LLM defense · ongoing risk control
Deepfake detection (image / video / audio / text)
04Advisory & TrainingAdvisory & Training
Consulting, capability assessment, special inspection and tailored training for professionals, academia and enterprise clients.
Capability assessment · IR readiness · benchmark analysis
CCSS · CCRC · senior research classes · university programs
Offline junior track · sector joint training · corporate cohorts
03Training Track
Training
Field-tested content — from zero-base to junior, plus topic-specific advanced tracks.
2.5 months · Zero-base
Offline Junior Track
Systematic training from zero to junior-ready — fundamentals, hands-on offensive/defensive drills, and project work, emphasizing hands-on skill and shippable deliverables.
Zero-base friendly, progressive
Offensive/defensive hands-on in realistic environments
Project + resume guidance for hiring
Online CoursesComing soon
A few large systematic courses as the spine, paired with dozens of focused micro-courses. Currently in preparation, not yet fully open — please stay tuned.
Coming soon: large systematic courses
Malware AnalysisSocial EngineeringAV EvasionInternal + AD PentestAI SecurityWeb SecurityCloud Security
More sub-¥1000 micro-courses arriving — follow the WeChat OA 「信益安信息安全研究院」 for release dates.
04Track Record
Track Record at a Glance
One-page summary of XYASEC's delivered capabilities — full project history, team certifications and client cases are available on the About page.
EngagementsChina Development Bank · State Grid Sichuan · China Telecom · PICC · Datang Power · University of Macau · Southeast University · Wuhan University
SectorsGovernment · Defense · Research institutions · Finance & energy · Critical infrastructure · Higher education
