What we help you achieve
A security test should produce findings your team can act on. We define the authorised applications, environments and testing boundaries before examining potential weaknesses. The resulting report explains what was observed, how it could affect the business and what should be addressed first, with sensitive evidence handled according to the agreed process.
Who this service is for
For businesses preparing an application launch, reviewing a significant change or needing an independent assessment of a website within an authorised scope.
What your project can include
Your proposal confirms the deliverables selected for your project.
- A written scope and rules of engagement, including exclusions and emergency contacts.
- The agreed vulnerability assessment and manual testing activities.
- A findings report with supporting evidence, severity reasoning and remediation guidance.
- A technical review of the findings and a separately agreed retest where required.
Scope, timing and budget
Application size, account roles, API coverage and testing depth determine the effort. Written permission from the appropriate owner is required, including relevant third-party restrictions. We agree safe testing windows and data handling before starting. A test assesses the defined scope at a point in time.
How a project like this can run
A customer portal review might examine access between account roles, session handling and exposed endpoints, then provide developers with the information needed to reproduce and fix confirmed issues.
Illustrative scope, not a reported client result. Your project is defined after discovery.
Questions about this service
Is a vulnerability scan the same as a penetration test?
No. Automated scanning identifies certain potential issues, while penetration testing can include manual investigation and validation within an agreed scope. The proposal states the depth and methods being purchased.
Will you confirm that fixes work?
Retesting can be included as a defined follow-up. The retest scope identifies the original findings being checked and distinguishes those checks from a new assessment of the whole application.