The people you meet do the work.
Testclub is a senior collective, not an agency. No junior staff, no learning on the job, no padding. Associates are engaged when the work requires them, and only people whose results we've seen first-hand.
Testclub was founded by Omar El Dali. Twenty years across trading platforms, fintech, insurance, health, energy and government, always at the boundary between specification and implementation, and the gaps that live there.
The career began in specifying and testing complex financial systems: work where a missing "what happens at midnight" costs real money. It produced the thesis Testclub still runs on: the most dangerous flaws in software aren't code bugs; they're things nobody thought to define. Applied first to functional testing and BDD, the same discipline now probes API logic the way an attacker would, and measures what AI systems actually do at scale.
LinkedIn →Evidence over assertion. Every claim reproducible, every finding shown with impact and fix. Delivered start to finish by the people you meet.
Specification thinking. Asking the questions a team has stopped asking. Depth over breadth: a thesis, not a service catalogue.
Method, visibly. Understand, Map, Test, Report. Conclusions follow from evidence, never precede it.
This way of working has a longer argument behind it: why specification gaps are where bugs, breaches and AI failures live, and why the skill of finding them transfers.
Read our philosophy: Specification is security →Before security, Testclub spent years building and repairing QA practices for clients including Schroders, EDF Energy, esure, Nephila Capital, Nando's and Sportingtech, including a full QA transformation at Sportingtech. That heritage is why the security work reads unfamiliar systems quickly: we've spent two decades learning how teams actually specify, build and break things.
View case studies →Conclusions follow from evidence, never precede it.
We reply to email within one working day.