تدقيق أمان الموقع

Frequently asked

Questions we get from people about to book.

Is this a penetration test?

No. Pentests are active probes against running infrastructure. Our audit is a read-only review of configuration, patch level, credentials and policy. Most stores need this first; pentests are valuable on top of it but not before.

Will the audit affect production?

No. Everything we do is read-only. We do not deploy anything, we do not run active probes, and our external checks hit the store at the same rate a normal browser would.

What if you find an active exploit?

We escalate the same day. Severity-1 findings get a dedicated email summary inside business hours of discovery, and we recommend an immediate mitigation while the full report is being written.

Do you sign NDAs?

Yes, before any access is shared. Standard mutual NDA or yours; same-day signature on standard terms.

Can you remediate the findings?

Yes. 100% of the audit fee credits against any remediation engagement inside 60 days. About half of customers do the remediation in-house once they have the prioritised list.