FAQ

Questions, answered straight.

The things businesses actually ask us before getting started. Don't see yours? Email it over — every question reaches a real person on our team.

What exactly do you do?

We find the places your business is unintentionally exposing data — leaked API keys, open databases, secrets in code, misconfigurations — and we help you close them. We do it under written authorization, and we verify the fixes.

Is this legal? Do you hack companies?

We only test systems you own or have authorized us in writing to test, within a defined scope. That's the line between security work and a crime, and we never cross it. No engagement starts without your permission.

How fast can you start?

Most exposure audits can begin within a few days of agreeing scope. If you think you're actively exposed right now, email us and we'll prioritize you.

What does it cost?

It depends on your attack surface, so we scope each engagement and send a quote. Many businesses start with a one-time exposure audit, then move to monthly monitoring. See Pricing.

We're a small business — is this overkill?

No. Small businesses and agencies are exactly who gets breached through simple exposures, precisely because nobody is watching for them. The fixes are usually fast and inexpensive.

What happens if you find something serious?

We tell you privately and immediately, explain the risk in plain terms, and help you contain it — rotate the secret, close the access, verify it's shut. Findings are never published or shared.

Do you offer ongoing protection or just one-time audits?

Both. A one-time audit shows you where you stand; monthly Managed Protection keeps watching as your business changes. Most clients do the audit first.

Can you help us get GDPR or SOC 2 ready?

Yes. Our data-protection readiness work assesses where you stand and builds a practical path you can actually prove to clients and auditors.

How do we get a question answered before committing?

Email [email protected] or book a free 15-minute call. No pressure, no obligation.

Still stuck? We're happy to help.

Send your question to [email protected] or book a quick call — we answer in plain English.