Approach
How an engagement runs.
Five steps, the same every time. Nothing is tested until the scope is written down and the agreement and rules of engagement are signed.
Process
Five steps, in order.
Testing starts only after the agreement and rules of engagement are signed.
- 01
Scoping
We agree what will be tested, and what will not, before any work starts.
- 02
Signed agreement and rules of engagement
Every engagement starts with a signed agreement and written rules of engagement.
- 03
Testing
Testing stays within the written scope. Exploitation stops at proof of impact.
- 04
Report
You receive a report with each finding ranked by severity and the steps to fix it.
- 05
Retest
Once fixes are in, one retest confirms whether they hold.
Commitments
Authorization and data handling.
Authorization
Nothing is tested without written permission.
- Every engagement starts with a signed agreement and rules of engagement.
- Testing happens only within the written scope.
- Exploitation stops at proof of impact.
Data handling
How client data is treated during an engagement.
- Health-data-aware (PHIPA) handling.
- Client data is handled on local AI models by default; cloud AI tools are used only with the client's written consent.
Deliverables
What you receive.
- A written report
- Every finding ranked by severity
- Remediation steps for each finding
- One retest
Next step
Start with a scoping call.
Tell us what you need tested. Before any testing begins, the scope is written down and the agreement and rules of engagement are signed.