How an engagement runs
Every engagement follows the same four stages. You know the scope, the price and the people involved before any traffic is sent.
Scope and authorise
We sign a mutual NDA, then hold a scoping call to agree targets, timing, testing windows and rules of engagement. You receive a fixed price and an authorisation letter for signature by an accountable owner of the systems in scope.
Test
A named senior consultant performs the work. Critical findings are reported to you the same day they are confirmed rather than being held back for the final report. You have a direct channel to the tester throughout.
Report and debrief
You receive an executive summary plus full technical detail with reproduction steps and evidence, ranked by business impact. We then walk your team through it live and answer remediation questions.
Retest
Once you have remediated, we re-verify every finding at no additional cost within 30 days and reissue the report so you have clean evidence for customers and auditors.
Rules of engagement. We do not perform denial-of-service testing, we do not test systems you do not own or control without the owner's written permission, and we stop immediately on request. Destructive actions are out of scope unless explicitly agreed in writing.