How we work
Our Methodology
A consistent engagement framework, adapted to what each engagement actually needs. Not every engagement requires every phase — a vulnerability assessment stops before Engineer; a hardening sprint runs the full sequence.
Discover
Initial conversation to understand your environment, objectives, and constraints before anything is scoped.
Scope
Written authorization, rules of engagement, and a defined scope boundary. Nothing technical begins without this.
Assess
Evidence collection against the agreed scope — scanning, configuration review, or architecture analysis, depending on the engagement.
Analyze
Findings are validated, false positives removed, and each finding is risk-classified with business context, not just a severity score.
Engineer
Where the engagement includes remediation, approved changes are implemented with rollback documentation and change management.
Validate
Technical validation that remediation actually closed the finding, not just that a change was made.
Report
A written report and handoff — findings, evidence, remediation guidance, and residual risk, in language both technical and executive readers can use.
Every engagement starts with authorization
- Written authorization, before any technical work
- Clear rules of engagement and scope definition
- Named customer prerequisites and point of contact
- Evidence collection tied directly to the agreed scope
- Findings validation before anything is reported
- Change management for any implementation work
- A documented customer handoff at close
Sample report structure
A representative outline — the report you'd actually receive follows this shape, populated with your engagement's real findings.
- 01 — Cover page
- 02 — Engagement scope
- 03 — Executive summary
- 04 — Methodology
- 05 — Risk overview
- 06 — Findings summary
- 07 — Detailed technical findings
- 08 — Business impact
- 09 — Remediation recommendations
- 10 — Prioritized action plan
- 11 — Validation results, where applicable
- 12 — Limitations and assumptions
- 13 — Appendices