Lab 539 Logo - a cog with a target in the center

It is often said that an adversary needs to get lucky only once, yet a defender must be lucky every time

At Lab539, we don’t believe this has to be the case

We created Lab539 to help organisations protect what really matters by turning the tables on this dynamic.

If you're looking for a way to turn the tables on adversaries and protect what really matters to your organisation, then contact us.

What we do:


Tailored Defences

Your organisation isn't generic - your attack surface isn't either. We design and build defences shaped around your specific architecture, workflows, and risk profile. From complex OT environments to bespoke enterprise systems, we focus on the work that sits beyond enabling default security features: understanding how an adversary would actually come at your organisation, and engineering the controls to stop them.



Adversary Hunting & Disruption

When you're seeing activity that doesn't add up, or threat infrastructure is hitting your customers, we dig into it. We run targeted hunts to understand what's behind the activity and, where possible, work to disrupt the infrastructure enabling it. This isn't traditional incident response - it's offensive-minded investigation aimed at taking the fight to the adversary.



Proactive Threat Intelligence

Our AiTM Feed service identifies adversary-in-the-middle backend proxy infrastructure before it's weaponised against your organisation. While most threat intelligence focuses on frontend phishing domains that rotate constantly, we track the persistent backend infrastructure that powers these attacks - giving you the ability to block threats proactively rather than react to them after the fact.


Contact Lab539

We’d love to help you do something amazing with your security

Find us at…

Join Lab539 at CYBERUK 2026 in Glasgow 21-23 April. Stand F20

We’re talking OT at the inaugural BSides OT in Bristol - sharing some insights to contribute to better securing OT networks.

Listen to our founder John share real world experiences securing OT networks at 5GOT in Malaysia (15-17 July).