Access request
You fill in the form. A person reads it and replies within 24 working hours.
home / how it works
how it works
How a penetration test works: from request to report
The path is the same for every client. The depth of the test changes, the rules do not.
Domain verification
A DNS record proves control of the domain. Without the record, no activity.
Signed scope
You declare domains, subdomains, roles, window and prohibitions. The scope becomes the technical limit.
AI-assisted testing
The analysis maps, proposes and tests with actions from the closed list. Every action is logged.
Human review
A person reproduces the vulnerabilities, assigns the severity and discards false positives.
Report
For each vulnerability: what, where, how to reproduce, severity and fix. The log is attached.
Delivery and closure
You deliver the report to your client. The service closes when the log and verdict are complete.
if something goes wrong
The situations we plan for.
A hypothesis leaves the domain
It is discarded and logged. It is never tested.
Something critical emerges
The system reports it immediately and suspends that line of testing.
The result is uncertain
The point stays open and does not enter the report as confirmed.
The first step is an access request.
No domain is touched before verification and signature.