The basis we work on.

The content here is provided for information. Prices shown are starting points for typical scopes and are not an offer; the price for your engagement is the one in your written scope document. We may change the content of this site at any time.

No testing of any kind begins without a signed engagement letter that names the targets, the permitted techniques, the testing window and the authorised contacts on both sides.

You confirm that you own the systems in scope, or hold written authorisation from whoever does. Where a target is hosted by a third party, that provider's testing policy applies and we will confirm it in writing before starting.

Findings from your engagement are yours. We do not disclose them to anyone, publish them, or use them in marketing, including in anonymised or aggregated form, without your written permission. Mutual NDAs are signed before scoping where you prefer.

A penetration test is a point-in-time assessment of a defined scope. It does not guarantee that no vulnerabilities exist, and it does not cover changes made after testing ends. We say this plainly because any provider claiming otherwise is selling you something that does not exist.

Any refund offered on qualifying non-black-box assessments is a commercial condition, not a guarantee that no vulnerabilities exist. Eligibility, scope, classification rules, and refund terms are set in the signed engagement letter. If there is any conflict, the engagement letter controls.

Questions about these terms go to [email protected].