Security assessment
We test your web applications and external perimeter, then write up what we found in plain language, ranked by what to fix first.
What we test.
Agreed in writing before testing starts.
- Web applications
- External perimeter
- Configuration
Evidence, severity, fix.
Scope, dates and rules are in the written proposal. We test only what it lists.
Every finding comes with evidence, a severity and the fix. Nothing added to look thorough.
The report is in plain language, ranked by what to fix first.
We are working towards the accreditations needed to issue certified audits. Until then, our reports are assessments, not certificates.
What you receive.
- Findings report, severity-scored
- Fix plan, ordered by risk
- Debrief call with your team
- One retest of fixed items
One retest is included.
When you have fixed the findings, we retest them once and update the report.
Further retests are scoped and priced before they start.
Questions we get before the first email.
How is pricing set?
Fixed price per scoped engagement. You get a written proposal with the scope, the price and what is excluded before anything starts.
Do we own the code?
Yes. It lives in your repository from the first commit. No licence fees, no lock-in.
Do you work with small companies?
Yes. We work mainly with small and medium companies that have no IT department of their own, or want an outside opinion. The scope is sized to the problem, not to us.
What if you are not the right fit?
We will say so in the first reply and suggest who might be.
Is there anything you will not take on?
Building or running the whole security of a critical system on our own. That needs a team and resources we do not have yet. When a project needs that, we say so and point you to specialists.
Can you train our team?
Yes. Every handover includes a walkthrough, and we run trainings for teams on the systems we build, test or review, so you can maintain them yourselves.
Tell us what you are building, or worried about.
If we are not the right fit we will say so and point you somewhere better.
Thanks, {name}.
We will reply to {email} within one business day. Quote {ref} if you write again.
- Address
- 70, route d'Esch
L-1470 Luxembourg - A call?
- 30 minutes, no deck. Ask in your message.