Adamantware OÜ has signed a distribution and exclusivity agreement with HealthTech Portugal — please contact them for any further information.
Contact HealthTech Portugal ↗If you do not have strong MFA, the Pentester Sidekick will identify that. An authorized MFA assessment framework for red-team engagements. Using a dedicated account the client provisions for the test, MPS drives their own identity provider — Microsoft Entra, Okta, Duo, Google Workspace, Gemalto/SafeNet over RADIUS and SwivelSecure PINsafe — and proves whether the second factor is actually enforced, whether one-time codes can be replayed, whether any rate-limit or lockout exists, whether the enrollment seed is weak (via MADDIE), and — for weak factors — whether the whole login can be relayed through an adversary-in-the-middle proxy. Only phishing-resistant MFA passes clean.
The AiTM interception is real, but it is bound to the single consented test account the client provisions for the engagement. The operator plays both ends of the relay — the phisher and the guinea-pig victim — capturing that account's own provisioning seed and live one-time code to prove the factor is phishable. MPS has no facility to enumerate, target, or capture any other identity; the single-account binding is a structural property of the tool, not a removable filter. It never sits in a real user's login flow.
MFA Pentest Sidekick is a professional security-testing tool intended solely for lawful use: security research, education, and authorized penetration-testing engagements against authentication systems whose owner has given prior, explicit written permission to test, using accounts and enrollment secrets the tester is authorized to hold.
Using this product to intercept, phish, or access the credentials, one-time codes, sessions or accounts of any person or organization without that clear written authorization is illegal in most jurisdictions — including under computer-misuse and unauthorized-access laws such as the U.S. Computer Fraud and Abuse Act, the UK Computer Misuse Act 1990 and equivalent EU legislation — and is strictly prohibited. You are solely responsible for staying within your rules of engagement and applicable law.
By joining the waitlist or purchasing, you confirm you will use the product only for authorized, lawful testing. Adamantware OÜ supplies it for legitimate red-team and research purposes and accepts no liability for misuse. See our Terms of Use.
The Standard build is scoped to a single consented test account by construction. The Tactical build answers to a different authority entirely.
Classified specifications. Reserved for sovereign nations and strategic defence agencies — disclosed under NDA and state mandate.
// Standard and Tactical are two separate, independently-compiled binaries. The single-account binding in Standard is structural, not a filter — the classified capabilities are not compiled into the Standard build, not disabled, not licence-gated. There is nothing in the Standard binary to unlock. (We’re not rookies.)