Using our website
Website terms.
Information about using this website, our resources and the next steps when you enquire about an assessment.
About this website.
This website describes MurtaSec’s security assessment and penetration testing services for web applications, APIs, AI-enabled applications and mobile applications. It also provides resources to help you prepare for an assessment.
This website is operated by MURTASEC LTD, registered in England and Wales under company number 15835180. Our registered office is 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ. Contact: hello@murtasec.com.
Enquiring about an assessment.
Contacting us starts a conversation about your requirements. An enquiry does not itself book testing, reserve delivery dates or authorise access to your systems.
Before an engagement starts, its scope, authorisation, delivery arrangements and commercial terms need to be agreed in writing. The engagement agreement governs the services, including confidentiality, permitted activities, deliverables and any retesting.
Tell us what you need tested and any requirements that affect the work. Please do not send credentials or confidential assessment material through a general enquiry form; use the sharing arrangements agreed for your engagement.
What a report contains.
Our report structure includes an executive summary, a summary of findings, and detailed findings with a description, reproduction steps, remediation steps and references. The assessment scope and any additional deliverables are agreed for the engagement.
An assessment examines the agreed scope during the agreed testing period. It cannot establish that every possible vulnerability has been found or guarantee that an application will remain secure. Testing is one part of managing security risk.
Using the guides and examples.
Our guides help you understand common questions and prepare information for scoping. They are general information, not legal advice, a certification or a determination that your organisation meets a regulatory or contractual requirement.
Check the source material and the requirements that apply to your organisation. A UK or US market guide does not establish that every rule discussed applies to your product or engagement.
Pages labelled as illustrative assessment examples use fictional scenarios. They show how a proposed assessment could be structured; they are not completed client case studies, reports or evidence of results achieved.
Planning your own brief.
You can use the planning checklist to prepare for your assessment and copy the questions with your notes into your own document. Completing it does not submit a request or start an engagement.
Using the website responsibly.
Do not use this website to transmit unlawful material, interfere with its operation or attempt unauthorised access. Publishing security information or offering penetration testing services does not give permission to test MurtaSec’s systems or anyone else’s.
If you want to report a suspected website security issue, contact support@murtasec.com to arrange an appropriate way to share the details. This is a contact route, not an authorisation to carry out testing.
Content and external links.
MurtaSec branding and original website material belong to MurtaSec or the relevant rights holder. You may use the planning questions for your own assessment preparation. Contact us before republishing our material or using our branding in a way that implies our endorsement.
Links to regulators, standards bodies and other organisations are provided for reference. Their content and privacy arrangements are controlled by those organisations.
Accuracy and changes.
Website information may change as our services and referenced guidance develop. Please confirm anything material to your purchasing decision with us. These website terms do not replace an agreed engagement contract or exclude rights that cannot lawfully be excluded.
Privacy and contact.
Read our privacy notice for information about enquiries, website services and your information rights.
For assessment enquiries, email sales@murtasec.com. For questions about this website, email hello@murtasec.com.
Submitting an enquiry sends your details to MurtaSec. It does not make a booking or start an assessment engagement.