Find what’s exposed.
Fix what matters.
Scoped external scans, static app testing, email authentication, secure websites, and ongoing hygiene for SaaS teams and small businesses. Clear written findings. Explicit authorization. Nothing runs without your permission.
Scoped work. Clear deliverables.
External Vulnerability Scan
Internet-facing systems. Ranked findings. Short report. Good for a first look, insurance questions, or “are we exposed.”
No exploitationSecurity Hygiene Review
MFA, email security, backups, admin access, and basic policy gaps. Written gap list you can hand to insurers or customers.
Not a pentestStatic App Testing (Android & iOS)
Authorized static review of Android and iOS app builds — code, packages, and configuration — without running the app. Hard-coded secrets, insecure settings, and common issues. Findings ranked with clear remediation guidance.
Written authorizationOngoing Hygiene Retainer
Scheduled checks on authorized domains. Findings delivered to you. Alerts if something material changes. Monthly or quarterly.
Authorization requiredEmail Authentication & DNS Setup
SPF, DKIM, and DMARC set up correctly, then a guided move to DMARC enforcement. You keep ownership of your accounts; we work through delegated access with a backup and rollback before every change.
Signed authorization · Details →Secure Website Building & Migration
Small, fast sites built with HTTPS and security headers, privacy-friendly analytics, and accessibility targeting WCAG 2.2 AA. Migrations off hosted builders. You own the code and content once paid in full.
Our own site is the case study →Permission → Findings → Fix order
Written authorization
Every engagement starts with explicit permission. Nothing runs against systems or records we have not been cleared to assess.
Scoped assessment
External scan, static app testing, hygiene review, email authentication, or website work — limited to the agreed scope. No surprise testing.
Clear written deliverable
Ranked findings, severity, and a practical fix list. Suitable for insurers or customer questionnaires.
Optional follow-up
Remediation review or ongoing retainer to confirm what is closed and catch material changes.