Test, assess, remediate.
We examine agreed web applications, APIs and externally reachable services. Before testing, we document systems, test accounts, methods, windows and reporting channels.
A finding needs evidence.
An automated indication starts as an indication. In the commissioned penetration test, we assess reproducibility, relevance and actual impact. The report combines technical evidence with concrete remediation steps.
Fixes deserve a retest.
Retests within the agreed scope and active contract term are included in recurring packages.