// engagement methodology
A disciplined process,
from scope to retest.
Authorized technical assessments follow this six-phase method, informed by the frameworks applicable to the scope. Advisory, compliance and documentation work use a tailored written plan with equivalent clarity on inputs, evidence, decisions and deliverables.
Scoping & rules of engagement
Targets, test windows, credentials, exclusions and communication channels are agreed in writing before testing begins.
Reconnaissance & mapping
In-scope surfaces, roles and data flows are mapped and prioritized. Unknowns and constraints are recorded.
Testing
Manual, hypothesis-led testing is backed by tooling and kept within the authorized boundary and safety constraints.
Validation gates
Each reported finding is manually reviewed. Evidence, scoring version, business context and any limitation are stated.
Reporting & debrief
The agreed executive and technical views connect evidence, impact, reproduction steps and remediation.
Retest & status
Where included in scope, fixes are retested and recorded as fixed, partial, open or accepted according to the evidence observed.