From first call to closed holes.
No account managers, full visibility at every step. Here's exactly what happens when you engage us.
We onboard max 2 new pentest clients per week. The current cohort wave closes Friday: sign by Friday and you're in Monday's kickoff.
Discovery Call & Scoping
A 25-minute call with an engineer, not a salesperson. We size your scope, then mirror your real deadline (the audit date, the contract signature, the insurance renewal) and tell you honestly whether we can make it.
25 minutes · engineer-ledBooking the Slot
A slot-deposit reserves your place in the next fortnightly cohort. Sign by Friday and you are in Monday's kickoff.
Fortnightly cohort kickoffsKickoff + Direct Line
We open a private Slack/Teams channel with the engineer who will actually hack you. No project manager in the middle; one is still around helping with logistics, but your questions go straight to the person holding the keyboard.
Direct Line · open from day oneFirst Blood in 72 Hours
Within three days of kickoff we show you the first real finding: the writeup of an actual hole in your systems. You know early that the engagement is working.
First real finding ≤ 72 hoursActive Testing, Zero-Noise Verification
Human-led testing of your attack surface. Every candidate finding is manually verified and shipped with a reproducible proof of concept: no scanner output, no false positives, no wasted engineering sprints.
0% false positivesReadout + Zero-Noise Report + Auditor-Proof Evidence Pack
A live readout with your team, then the deliverables: the Zero-Noise Report (verified findings, reproduction steps, curl commands) and the Auditor-Proof Evidence Pack, with findings pre-mapped to the compliance framework of your choice (ISO 27001, GDPR, SOC 2, SIG Lite...) so procurement gets answers, not just a PDF.
Zero-Noise Report + Auditor-Proof Evidence PackBoardroom Briefing
A live online recorded 20-minute non-technical walkthrough plus a one-page risk summary, built for executives and the board, so you never have to translate the report yourself.
Recorded · 20 min · board-readyRemediation Playbooks
Per-finding fix instructions written for your stack, so your engineers remediate in days instead of burning sprints on generic guidance.
Written for your stackThe Plugged-Hole Guarantee
We retest every fix, free, within 6 months of your report. If a hole we reported is not closed, we keep testing until it is, at no charge.
Free retests for 6 monthsFive commitments. These are also the conditions behind our Audit-Pass Assurance.
- Testing access granted within 48 hours of kickoff
- Scope signed off before Day 0
- One technical point of contact on your team
- ~2 hours of your team's time per week
- Someone senior attends kickoff and readout
Every finding retested free for 6 months. If the hole isn't closed, we keep testing until it is.
Response time: < 24 hours