FAQ

Common questions about security engagements.

Practical answers before you start a conversation.

Do you test production?

Only when production testing is explicitly authorised and safeguards are agreed in writing.

Do you need source code?

No. Black-box and grey-box approaches are possible. Source-assisted review can be added where useful.

Can you work with an international company?

Yes. Engagements can be delivered remotely across regions and time zones.

Can you sign an NDA?

Discuss the requirement in your enquiry. Appropriate confidentiality terms can be considered before sensitive project details are shared.

How do I start?

Use the security assessment form. You do not need to know the perfect service name.