Frequently asked questions

A vulnerability assessment identifies and catalogues weaknesses across your systems, usually with heavy use of automated tooling. A penetration test goes further: our testers actively exploit those weaknesses by hand to prove what an attacker could really achieve. Most clients start with an assessment for breadth, then a penetration test for depth on critical systems.

Scoping takes one to two days. A focused external network or web application test usually runs three to five working days, with the report delivered within a week of testing finishing. Larger environments take longer — we give you a firm timeline before any work begins.

We agree rules of engagement with you before starting, including testing windows, out-of-scope systems and escalation contacts. Destructive techniques are never used without explicit written approval, and we can test against staging environments where production risk is a concern.

A prioritised findings report: every issue with a reproducible proof of concept, a CVSS score, the business impact in plain language, and a specific remediation step. You also get an executive summary suitable for your board or clients.

Yes. Once your team has shipped the patches, we retest the original findings at no extra cost and issue an updated report confirming what has been closed. This is included in every engagement.

Always. We sign your NDA before scoping begins, and all findings, data and evidence are handled under strict confidentiality and deleted according to an agreed retention schedule.

Contact us immediately through the contact page and mark it as an emergency. Our response team is available 24/7 to contain the attacker, close the entry point and restore your services.

We have entities and teams across India, the United States and the United Kingdom, and we work with clients remotely worldwide.

Both. Engagements are scoped to the size of your environment, so a small SaaS product with a handful of endpoints costs considerably less than a multi-region enterprise network.