Human-led testing
Tested by people.
A scan lists what might be wrong. A tester decides which of it matters, tries to chain it together and shows you what an attacker could really reach. This is a paid engagement: we agree scope and price with you in writing before starting.
What it is
We combine tools with manual testing. Tools cover the ground quickly; people look for what tools miss: broken access control, flaws in business logic, and weaknesses that only matter in combination. Every result is explained in plain language, with the evidence and a way to fix it.
Who it is for
- Teams that have run vulnerability scans and want to know what they miss
- Companies launching a new product, portal or API
- Organisations asked by a customer or regulator for an independent test
How it works
- 01
Scope
We agree what is tested, when, from where, and what is off limits, in writing.
- 02
Test
Manual testing with tools. We tell you at once about anything serious.
- 03
Report and re-test
A clear report, a walk-through with your team, and a re-test of what you fix.
What you get
Written authorisation first
We test only what you authorise, inside the window you set.
Evidence you can reproduce
Steps, requests and screenshots, so a developer can see the issue for themselves.
Certainty stated honestly
A finding is either confirmed or marked as a lead. We do not pad the report.
A walk-through
We explain the results to your team and answer questions.