What happens when you get in touch
The first contact is not a sales call. It is a scope review to understand what you need and what it costs. Three steps, with no obligation:
1. Tell us the scope
Write to us about what needs testing: web or mobile applications, APIs, domains, infrastructure or Active Directory. If it is not clear yet, we define it together in a 30-minute call.
2. Get a quote within 24h
We send a proposal with hours, line items, methodology and delivery date. Fixed price before we start: no surprises or extra hours mid-project.
3. We run the audit
Written authorization is signed, dates are planned and the test is executed. At the end you receive the report with CVSS severity, evidence and a prioritized remediation plan.
What to include in your first message
The more concrete the scope, the tighter the quote. It helps to state: which assets need testing (URLs, domains, applications, APIs), whether several roles or user types exist, whether source code is available, your target dates, and whether the report must serve ISO 27001, ENS or another compliance framework.
If you are looking for something specific, our services page details each type of audit.