Our services
Choose the application or workflow you need assessed. We’ll agree the coverage, handling arrangements and evidence your team needs before testing starts.
Understand risks across your web application’s functionality, data handling and supporting configuration, with clear priorities for remediation.
Assess your API’s access controls, input handling, business logic and configuration, with practical findings for your team.
Understand risks in your AI application’s inputs, data access, generated output and connected actions, with practical advice on what to fix.
Assess your iOS or Android app’s storage, communications, platform interactions and backend controls, with clear advice on what to fix.
What your team receives
A useful report explains the technical risk and gives people a practical next step. We agree the format, recipients, readout and retest allowance during scoping.
Each detailed finding includes a description, reproduction steps, remediation steps and references.
Our process
Bring your product, deadline and review requirements. We’ll work through the details with you.
Start with your product, deadline and reviewer. Confirm the environment, data, access and boundaries.
Use established security guidance as a baseline, then build on it with specialist testing of the agreed functionality, data flows and configuration. Document validated findings and the limits of the assessment.
Walk through the results and practical remediation guidance with the people responsible for the next steps.
Use the defined retest allowance to check the agreed changes and record the resulting status.
Before we begin
We agree the product version, environment, roles, workflows and exclusions before work starts. Coverage depends on that scope, rather than a promise to find every issue.
We establish what the reviewer expects, including scope, report format and any provider credentials. The reviewer decides whether the resulting evidence meets its requirements.
The engagement defines the readout, clarification support and retest allowance. Your team implements the fixes; we assess the agreed changes within that retest scope.
Private, self-hosted AI assistance. Assessment material is not sent to third-party model providers for that assistance. Storage, access, location, retention and contractual requirements are agreed separately. Read our handling approach.
Tell us about your product, your deadline and the evidence your reviewer needs. We’ll agree the scope and handling arrangements before work starts.