Approach
From intake to concrete action
We work in a structured and transparent way. You know in advance what we examine, which data we collect and what you get at the end.
The process
Four steps
Agree on scope
We discuss your organisation, domains and goals, and record together what we may examine.
- Confirm main domains
- Record the scope
- Sign the authorisation form
Map
From an outsider's perspective, we find everything publicly linked to your organisation.
- Domains and subdomains
- DNS and certificate data
- IP addresses and services
Assess
We verify the assets found and rate what is publicly visible on risk and impact.
- Asset validation
- TLS, DNS and header checks
- Severity rating
Report
You receive a clear overview with priority, evidence and a fix for each finding, and we review it together.
- Executive summary
- Technical findings
- Review and next steps
What you get
Clear agreements, up front
| Part | What it involves |
|---|---|
| Intake | Introduction, goals and planning |
| Authorisation | Signed form with the exact scope |
| Report | Summary, asset overview, findings and action plan |
| Review | We go through the report together and answer questions |
| Urgent finding | How and how quickly we inform you about a critical issue is agreed in advance |
Safe and controlled
Only with your permission
An assessment starts only after written authorisation and scope confirmation. We carry out no attacks or destructive tests and stay within what you have approved. See the authorisation form →
Ready for a baseline?
Request an intake. We'll schedule a short call and send you the authorisation form.