Methodology
Every engagement is shaped around scope, authorisation, evidence and practical remediation.
Business objective, important systems, users, data and known concerns.
Targets, exclusions, test windows, contacts, rules and success criteria.
Architecture, configuration and agreed attack surface are examined using appropriate techniques.
Material findings are checked and contextualised so the report is useful.
Executive summary, technical evidence, priorities and remediation guidance.
Questions are answered and next actions can be discussed with technical stakeholders.