Skip to main content

HOW WE CONTRACT

Four engagement models One methodology.

Pick the shape that fits the decision you are trying to make. The testing does not change between them - only how it is scheduled and how it is bought.

Engagement models

Different commercial models, one delivery standard.

every model includes named operators, same-day critical escalation and bilingual reporting

MODELProjectRetainer, RECOMMENDEDProgrammeSelf-serve
DURATION4-12 WEEKS6-12 MONTHSINSTANT ACCESS
BEST WHENYou have a deadline, an audit or a single system to clear.You need the capability to stay in-house afterwards.Individuals and small teams starting today.
STRUCTUREOne fixed-scope engagement with an agreed start and end date, priced up front.Test, train, measure, repeat - services and training run as one plan.Online courses and the free tools platform, with no procurement cycle at all.
INCLUDES
  • Scope agreed in writing
  • Report + walkthrough
  • One retest included (14 days)
  • Attestation letter
  • Annual test calendar
  • Continuous validation
  • Capability curriculum
  • Board-level reporting
  • Instant LMS access at checkout
  • Team licences and seat reporting
  • 102 free tools, most without login
  • Upgrade to a programme any time
Request a scoping callDesign a programmeBrowse courses
COMMITMENTS

Three things that never move. Whichever service line, whichever engagement model.

Named operators

You know who is testing, their certifications and their track record. No offshore hand-off.

Same-day criticals

Anything that puts you at immediate risk is escalated within hours, not at report delivery.

Bilingual reporting

Every deliverable in English and Bahasa Indonesia, structured for ISO 27001, PCI-DSS and OJK reviewers.

NEXT STEP

Tell us what needs testing. An operator reads it first.

A 30-minute scoping call with the operator who would run the engagement. A written scope, timeline and fee follow within 2 working days of the scoping call.

METHODOLOGY & COMPLIANCE
ISO 27001PCI-DSSOJKUU PDP