How it works
From first conversation to fixed weaknesses, step by step.
A transparent process, with agreed scope and clear authorisation at every stage.
01Process
The eight steps
| Step | What happens | What we need from you | What you receive |
|---|---|---|---|
| 1. Discuss requirements | We learn what you run and why you want an assessment | A short description of your goals | A recommended direction |
| 2. Identify assets | We list what could be in scope | Addresses, apps, cloud accounts you know of | A draft asset list |
| 3. Define scope and authorisation | We agree what is tested, how, and when | Written permission from someone with authority | A written scope |
| 4. Recommend a service | We suggest the right type of assessment | Questions and decisions | A clear recommendation |
| 5. Proposal and quotation | We set out scope, deliverables and cost | A review and approval | A tailored proposal |
| 6. Assessment | Our team tests the agreed assets | Test accounts, a contact, access as agreed | Updates, as agreed |
| 7. Findings | We present results and recommendations | Time for a walkthrough | A management summary, detailed findings and fix guidance |
| 8. Follow-up | We check fixes, where included | Notice when fixes are ready | A retest result, if included |
02Preparation
What to prepare
- 01
A list of the systems you want assessed
- 02
Someone with authority to approve testing
- 03
A technical contact
- 04
Test accounts, where needed
- 05
Your preferred testing times
03Boundaries
What we will not ask for
- Real customer data
- Passwords sent by email
- Anything outside the agreed scope
04Timing
What affects timing
The size and complexity of the scope, how quickly access is ready, the number of environments and any fixed deadlines. We give an estimate after the scope discussion.
05Safety
Safe testing
We test only what you authorise. We agree windows and limits first. We stop if you ask.