how we work
Six steps, each agreed with you in advance. The fix and the retest are part of the job, not an upsell.
the six phases of an engagement
Every step is agreed upon in writing before any packets are sent. No surprises, no unexplained bills.
Scope
We agree what is in scope and what is not, in writing, on a call with the people who own the systems. A vague scope gives a vague report.
Recon
We look at your organisation from the outside, the way someone targeting you would. We often find systems you had forgotten you owned.
Test
A person works through your systems and chains findings together. Anything critical is reported the same day, and you have a shared channel with the testers.
Report
One document with two audiences: developers get reproduction steps, management gets a plain-English page.
Fix
We stay available while you fix. Most clients use us as a second pair of eyes on the patch. This is included.
Retest
We test every fix and update the report. A finding is only closed when we fail to exploit it again. This is included in the original price.
what we hold ourselves to
A finding is real or it is noise
Nothing reaches your report unless a tester has confirmed it works in your environment and can show you how.
Severity is argued, not calculated
Every finding comes with a rating and the reasoning behind it. If you disagree, you can see exactly why we rated it that way.
The retest is part of the price
We check every fix within 90 days and reissue the report. Charging twice to check our own advice is not how we want to work.
Written for the people who act on it
Developers get exact steps. Decision-makers get one honest page. Neither is a template with your logo dropped in.
frameworks our reports map to
Mapping a finding to a framework helps your audit. It is not a certification, and passing a test does not by itself make an organisation compliant.
- ISO/IEC 27001
- PCI DSS
- SOC 2
- NIST CSF
- MITRE ATT&CK
- Nigeria Data Protection Act 2023
tell us what worries you most
A twenty-minute call is usually enough to tell whether we are the right fit. If we are not, we will say so.