Authorized, researcher-led, validated end to end

What working with us looks like

1. 1

   Discovery

   We learn about your applications, business need, timing, reporting expectations and procurement process.

2. 2

   Technical scoping

   A researcher reviews asset types, complexity, access, exclusions and the effort required.

3. 3

   Contract & authorization

   Signed SOW, NDA where appropriate, written authorization and rules of engagement. No testing starts without them.

4. 4

   Onboarding

   You provide test accounts and access through a secure channel. Approved targets are allowlisted.

5. 5

   Assessment

   Manual testing, supported by AI-assisted tooling only where it has been validated and authorized.

6. 6

   Quality assurance

   Evidence is reviewed, secrets redacted, duplicates reconciled and severity assigned defensibly.

7. 7

   Report

   An executive summary, technical findings, reproduction steps, remediation, methodology, limitations and coverage.

8. 8

   Readout & retest

   We walk your team through the results, retest agreed fixes and update finding status.

Rules every test follows

Offensive testing carries real risk. These rules apply to our tooling as much as to our people, and none of them are optional.

• Written authorization before any active testing
• Exact assets, methods, schedule and prohibited actions documented
• Allowlisted targets; scope is never expanded without approval
• Human approval for potentially disruptive actions
• Rate limits, stop conditions and a kill switch
• Sensitive evidence encrypted, secrets redacted, retention limited
• AI suggestions marked unvalidated until a researcher confirms them

A report your engineers can act on

Every report includes an executive summary, a findings register, reproduction steps with redacted evidence, prioritized fixes, and an honest statement of coverage and limitations.