SECURITY
Security starts with clear boundaries.
Our approach to discussing, scoping and handling security work.
Assessment scope
All testing must be authorized and scoped before it starts. Scope defines systems, boundaries, methods and the route for reporting.
Handling information
Engagement-specific information handling, access and retention requirements are agreed as part of the work. Avoid sending credentials or confidential technical material through an initial inquiry.
Reporting a concern
Use the contact page to start a security-related conversation. Describe the nature of the concern without including secrets or exploit material.
Assurance information
No independent security certification or audit attestation is claimed for this new company. Ask about the practices and requirements relevant to a proposed engagement.