How we work
A fixed sequence, so you know what will happen before anyone tests anything.
1
Scope
We agree the systems, the dates, the emergency contact, and what a successful test is allowed to do.
2
Reconnaissance
We collect what is already public, and confirm it is in scope.
3
Scanning
We find hosts, ports and likely weaknesses.
4
Controlled testing
We check the important ones carefully. We do not wipe logs, and we do not leave access behind.
5
Report
Findings are rated by impact on the business, with evidence and a fix for the technical team.
6
Debrief
One session for leadership, and the same session opened up for the people who will fix the issues.