AI supporting your assessment
We use our own private, self-hosted models to assist the assessment. The agreed handling arrangements apply to the information we use during that work.
How we handle assessment material
Your penetration test.
Supported by self-hosted models.
Our specialists use private, self-hosted models to support your penetration test. Your assessment material is not sent to third-party model providers for that assistance.
AI assistance during your assessment
Expert
testing
testing
Private
self-hosted models
self-hosted models
Assessment material is not sent to third-party model providers for this assistance.
Your handling requirements
Agree the details
before testing starts.
You should know where your assessment material is stored, who can access it and how long it is kept. We agree these details and any required agreements with you before access.
| What matters | What this means for your assessment |
|---|---|
| AI assistance | We use our own private, self-hosted models. Your assessment material is not sent to third-party model providers for this assistance. |
| Environment and access | The test environment, information we can use, where it can be stored and accessed, and who is authorised to work with it. |
| Evidence handling | Where findings and reports are stored, who receives them, how long they are retained, and how deletion, backups and logging are handled. |
| Confidentiality and agreements | Your confidentiality requirements, each party’s responsibilities and any applicable data-processing or business-associate agreements. |
| Your report and follow-up | An executive summary, a summary of findings and detailed findings with descriptions, reproduction steps, remediation steps and references. A findings walkthrough and any retesting follow the agreed engagement. |
How AI supports your test
Expertise leads
your assessment.
Our specialists lead your penetration test, validate findings and explain the next steps. Our self-hosted models support their work, whether you need a web, API, mobile or AI application assessment.
Testing AI in your product
If your application includes AI, we can also assess its inputs, outputs, data access and connected actions within the agreed scope.
Your questions, answered
Questions about
your assessment data.
Can you meet our UK or US data-location requirements?
Tell us where your assessment material may be stored and accessed, and any restrictions on who may access it. We confirm whether we can meet those requirements before work starts; self-hosting alone does not determine data location.
Can your AI assistance run in our environment?
If you need AI assistance hosted in your own environment, raise this during scoping. We will assess feasibility and confirm the access, infrastructure and delivery arrangements before offering that option.
What happens to logs, retained data and model training?
We agree the logging, telemetry, retention, deletion and training arrangements for your engagement explicitly. These are separate requirements from self-hosting, so we confirm them with you before assessment material is accessed.
Can the assessment support our security or compliance requirements?
We agree the technical scope and evidence you need, then provide findings and remediation guidance for that scope. A penetration test provides technical evidence; it does not by itself certify compliance or guarantee approval.
Let’s talk through
your penetration test.
Tell us about the system you need tested, your deadline and any data-handling requirements. We’ll work with you to agree the scope and delivery arrangements.