Skip to content
CISA lists exploited flaws in the Linux kernel and VMware ESX
Black Shard

Loading

    Approach

    How an engagement works.

    The same structure whether we are building a system or testing one.

    Engagement

    Scope, delivery, remediation.

    • Scope

      Scope, deliverables and price are agreed in writing before work starts.

      What is being built or tested, the systems in scope, the information that matters and any regulatory or operational constraints.

    • Delivery

      Engineering moves through design, build and production. Security work moves through reconnaissance, testing, validation and reporting.

      Findings are manually verified before they are reported.

    • Remediation

      We implement the changes, or hand your team the engineering detail to make them.

      Security findings included for verification are re-tested once the fixes are deployed.

    A glass-walled meeting room at night, the chairs pushed in around the table and a network map on the screen at its end.

    Accountability

    The person who scopes the engagement stays on it.

    That keeps the commercial and technical context together, from scope through delivery to the re-test.

    What you receive

    What every engagement hands over.

    • The scope and price

      The document every later step is checked against.

    • Verified findings

      Each with the steps to reproduce it and a recommended fix.

    • A re-test

      Every original finding checked again after the fix.

    Our own estate

    Held to the standard we assess against.

    Trust centre

    Open a brief.

    Tell us what you need built, reviewed or secured.