Our approach: from intake to retest

A good penetration test (pentest) is more than a list of vulnerabilities. It is a careful process with clear agreements up front, skilled work during the test and a report you can actually act on. This is how we go about it.

Step 1: Introduction and intake

We start with a free call about your situation: the reason for the test, what needs to be tested and what you want to do with the results. Together we define the scope: which systems, which type of test (black box, gray box or white box) and how deep we go. After this call you know exactly what to expect.

Step 2: Fixed-price quote

After the intake you receive a quote with a fixed price, the defined scope and the schedule. No surprises afterwards: what we agree on is what you pay.

Step 3: Preparation

Before we start we formally record your authorization and agree who in your organization is informed, which period we test in and how we handle risky actions. Where needed we inform your hosting provider. We know what they need and help you arrange it.

Step 4: Execution

The test is performed manually by the specialist you have spoken with, supported by professional tooling. We always verify automated findings by hand so no false positives end up in your report. If we find a critical vulnerability, you hear about it right away and not just in the report.

Step 5: Report and personal debrief

You receive a report with a management summary in plain language and a technical section that gives the risk (based on CVSS), the evidence and concrete remediation advice for every finding. We go through it together, with your IT provider or developer present if you wish, and answer all your questions.

Step 6: Remediation and optional retest

With the report your team or supplier can get to work in a targeted way. On request we then perform a retest on the resolved findings, as an extra check that the doors are really closed. Many clients then choose to test annually and scan in between, which keeps the picture up to date.

Careful with your trust

During a pentest we work with confidential information. Confidentiality is a standard part of our agreements, we handle test data with care and afterwards we clean up our traces. Discretion is not an extra but a core value.

Also read what a pentest costs and the frequently asked questions.

Want to know what this means for your environment? Schedule the free intake call.