It depends in the service to be performed and the size of the application or the number of hosts to test in case of a network penetration test. A scoping call will be scheduled in advance to provide an accurate quote and testing time for the project.

As mentioned before, a scoping call is needed and after the pentest proposal is sent you will need to provide us with the necessary pre-requisites accorded in the scoping call so we can start with the testing. (could be VPN access, application users, roles, etc.)

Strict confidentiality agreements (NDAs) will be signed to ensure the complete protection of your company's information.

If a critical-risk vulnerability is found, it will be reported immediately for prompt correction. For all other vulnerabilities, the details will be included in the technical report for your technical team to address, following the security recommendations provided in the report.

Two retests are included with the service after the remediation of the reported vulnerabilities in order to make sure that all the vulnerabilities were remediated in a secure way.