Engagement
There is nothing here
to buy.
Engagement begins with a request. Every request is examined properly — because the security of the institution on the other side of it becomes our reputation the moment we accept.
We decline more than we accept, and we decline early.
How a request is handled
The request is read by an engineer
Not by a sales function, and not by an automated qualifier. The first person who reads it is someone who could build what you are asking for.
It is analysed before it is answered
We examine the scale, the constraints, the jurisdiction and the threat you are actually exposed to. Where the request is not a fit, we say so early and say why.
Documentation is exchanged
Where a request proceeds, we agree the legal basis that permits us to act inside your estate, in writing, before anything is installed.
Delivery by our own engineers
Installation, adaptation and the first period of operation are carried out by the team that builds the system, not handed to a channel.
Submit a request
Tell us what has to be true.
Enough to let an engineer judge whether we are the right people. No budget field, no company-size dropdown, and no follow-up sequence.
Transmitted over TLS and delivered to a named mailbox. We retain a request only for as long as the matter it concerns, and we do not profile, enrich or resell anything you send us.
Other channels
Reach us directly.
Security researchers with a finding in our own products should use the coordinated disclosure channel. Reports are acknowledged by an engineer.