CLEAR ANSWERS
Questions, Answered.
The honest answers to what clients ask us most before initiating a signed scope assessment.
Yes — and staying that way is the whole point. Every engagement begins with a signed Scope of Work that defines exactly what we are authorized to do. OSINT work uses only passive, publicly available sources. Vulnerability assessment is performed strictly against assets you own and explicitly authorize in writing. We never test, access, or investigate anything outside that scope.
Have a Specific Question About Your Scope?
Talk directly with our lead security researchers. We offer free consultation calls to answer questions and clarify parameters before anything is signed.