Skip to main content

HOW WE WORK

Six phases. No surprises.

The same six phases run behind all four service lines. Scope is agreed in writing before anyone touches a target, critical findings are escalated the day we find them, and the engagement is not closed until the retest passes.

THE SIX PHASES

From scoping call to attestation letter. Agreed in writing at the start.

Fixes verified within 14 days. Attestation letter issued for auditors.

PHASE 01
Scoping

30-minute call, rules of engagement, targets and windows agreed in writing.

PHASE 02
Recon

Attack-surface mapping, OSINT, asset validation against your inventory.

PHASE 03
Exploitation

Manual testing and chaining. Critical findings reported the same day, not at the end.

PHASE 04
Post-exploitation

Impact proof: what data, what money, what blast radius - safely demonstrated.

PHASE 05
Reporting

Executive narrative plus technical appendix, walkthrough session with your engineers.

PHASE 06
Retest

Fixes verified within 14 days. Attestation letter issued for auditors.

NEXT STEP

Tell us what needs testing. An operator reads it first.

A 30-minute scoping call with the operator who would run the engagement. A written scope, timeline and fee follow within 2 working days of the scoping call.

METHODOLOGY & COMPLIANCE
ISO 27001PCI-DSSOJKUU PDP