Methodology

From signed scope to verified fix.

Scanners find signals. Testers prove impact. Every engagement follows the same seven steps, so you always know what's happening and what happens next.

1. 01

   Scope & authorise

   We agree targets, exclusions, testing windows and stop conditions, and collect written authorisation from the asset owner before any testing.

2. 02

   Reconnaissance

   Passive discovery maps your attack surface — domains, hosts, identities and exposed services — the same way a real attacker would start.

3. 03

   Threat modelling

   We decide where an attacker would get the most value and plan test cases around your business, not a generic checklist.

4. 04

   Testing & exploitation

   Testers validate weaknesses manually against the agreed scope, chaining issues into realistic attack paths while avoiding disruption.

5. 05

   Live escalation

   Anything critical is reported to your named contact as soon as it is confirmed, without waiting for the final report.

6. 06

   Reporting

   An executive summary for leadership and evidence-backed technical findings, each with severity, reproduction steps and a fix.

7. 07

   Debrief & retest

   We walk your team through results, then retest fixed findings so the report shows what was actually closed.