Core service

Security assessments

A scoped review of a website, application, or server — with a written report you can act on and share

What an assessment is

An assessment is a time-boxed review of systems you authorize. We combine automated checks with analyst review, then write up what is confirmed, what is suspected, and what we did not test.

It is not a promise that every weakness has been found. It is a defensible statement of coverage, method, and priority — the document most clients need for an insurer, a client questionnaire, or an internal decision.

Websites

Public sites, portals, and content systems: exposure, configuration, authentication, and common application flaws visible from the internet.

Applications

Web applications and APIs you operate: session handling, access control, and the paths that hold customer or operational data.

Servers

Hosts and supporting infrastructure you designate: services, patch posture, remote access, and configuration that should not be public.

What you receive

  • Written report — findings, evidence, severity, and recommended next steps. PDF, not a portal you have to learn.
  • Priority order — what to fix this week versus what can wait, so work is not blocked by a 40-item list.
  • Review call — we walk the report with the people who will do the work and the people who approve it.
  • Scope statement — what was in, what was out, and any limits so the report cannot be over-read.

How we start

  1. 1. Inquiry. You send the URL or system list and any deadline (audit, launch, client request).
  2. 2. Proposal. We reply with scope, window, fee, and rules of engagement. Nothing runs until you accept.
  3. 3. Authorization. Written permission for named targets. NDA if your counsel requires it.
  4. 4. Delivery. Testing in the agreed window, then the report and review call.

What we will not do

  • Test systems you do not authorize, including third-party SaaS you do not control.
  • Run destructive tests on production without a separate, written approval.
  • Claim a framework certification (ISO, SOC 2) as an outcome of this assessment.
  • Use your findings or name in marketing.

Request a scoped proposal

Include the site or system and any date you must meet. We will tell you if a free scan, an assessment, or a consult is the right first step.

Request a proposal