Engagement
There is nothing here
to buy.
Engagement begins with a request. Every request is examined properly — because the security of the institution on the other side of it becomes our reputation the moment we accept.
We decline more than we accept, and we decline early.
How a request is handled
Request
You describe the estate and the concern. No budget field and no qualification call.
Technical review
An engineer reads it and judges whether we are the right people. Where we are not, we say so and say why.
Scope and authorisation
The scope is written down and you authorise it in writing. This is the legal basis that permits us to act inside your estate.
Quotation
Priced against the agreed scope. Issued on request — there is no published rate card, because there is no standard estate.
Execution
Carried out by our own engineers, under your authorisation, with the ability to stop it at any moment.
Findings and decision
Delivered, defended, and discussed. Whether anything follows is a separate decision, made afterwards.
Submit a request
Tell us what has to be true.
Enough to let an engineer judge whether we are the right people. No budget field, no company-size dropdown, and no follow-up sequence.
Transmitted over TLS and delivered to a named mailbox. We retain a request only for as long as the matter it concerns, and we do not profile, enrich or resell anything you send us.
Other channels
Reach us directly.
Security researchers with a finding in our own products should use the coordinated disclosure channel. Reports are acknowledged by an engineer.