About CovertSwarm
What is CovertSwarm?
CovertSwarm is offensive security as a constant: instead of point-in-time pentests, its "swarm" of ethical hackers attacks client organizations continuously — physical, digital and social vectors — for a flat subscription. Founded in London in 2020, its ~77 hackers and operators serve enterprises across the UK, Europe and North America.
Where will I work?
Anywhere: every live job listing says "100% remote work worldwide", and the careers page doubles down — "Work from anywhere."
What is the CovertSwarm team like?
Red-teamers, social engineers, exploit developers and account leads with a pirate-flag aesthetic and enterprise-grade discipline — people paid to break in so others can't.
Work-Life Balance
Two policies, both from the company itself: "100% remote work worldwide" in all nine live postings, and "Unlimited holiday" on its careers page. Offensive security burns people out at many firms; a worldwide-remote, unlimited-holiday structure is CovertSwarm's stated answer.
Perks and Benefits
- Unlimited holiday
- 100% remote work — worldwide
- Continuous-offensive-security mission (no travel-heavy pentest grind)
- Competitive compensation per its postings
How we verified this listing
CovertSwarm's two commitments are stated in its own materials: "100% remote work worldwide" in all nine live postings, and "Unlimited holiday" with "Work from anywhere" on its careers page. We applied the region-lock test we use on every worldwide claim — its postings are genuinely location-unrestricted, which is why the profile carries our worldwide flag. Offensive security is an intensity-prone craft; a subscription model (continuous engagement rather than deadline-stacked point-in-time pentests) plus structural flexibility is CovertSwarm's stated answer, and the one worth probing in an interview. Review-site ratings were unreachable at add time, disclosed as with the whole cohort. The company publishes little else about its internal benefits — a two-line public package is genuinely all that exists in its materials, which we record in our sparse-benefits ledger rather than pad with guesses. What it does publish, it repeats consistently across every posting and its own site, and the worldwide-remote structure is verifiable directly from the location fields of its live roles — the strongest form of evidence a remote claim can have.