When this service helps
You want to complement a document-based assessment with a technical observation.
A customer or an insurer is asking for scan results.
You can authorize testing on a precise scope with your IT team.
What you receive
Deliverables
- Standard: technical and executive reports, classification of findings.
- Premium: Standard, contextualized recommendations and presentation.
- Executive: Premium and an action plan organized by priority.
- Retest after remediation only if planned in the engagement.
Scope covered
- Targets, technologies and scan windows authorized in writing.
- Scan using a physical or virtual sensor and targeted review of the results.
- Checks, package and any retest after remediation defined in the proposal.
How it works
- 01
Authorize
We define the targets, windows, contacts and stop conditions in writing.
- 02
Scan
We run the campaign within the agreed technical scope.
- 03
Review the results
We verify the priority findings according to the authorized checks and explain the limits of validation.
- 04
Deliver
We hand over the reports and the presentation included in your package.
Your involvement
Written authorization, agreed access and an IT contact available during the scan window.
Service limits
- Penetration testing, technical fixes and scope extension excluded.
- A check after remediation is included only if it appears in the proposal.
The scope, responsibilities, recipients of the deliverables and confidentiality terms are agreed before data collection. Any change in scope is accepted in writing.
Frequently asked questions
No. The scan looks for vulnerabilities in the authorized targets. It does not include exploiting vulnerabilities or social engineering.
The checks are defined based on the targets, the package and the authorized access. Priority findings undergo a targeted review. Limits and unconfirmed results remain visible in the report.
We consider technical severity, exposure, the importance of the system and the available information on exploitation of the vulnerabilities. The criteria used are explained in the report.
A written agreement sets the targets, exclusions, scan windows, contacts and stop conditions. A sensitive environment must undergo a feasibility review.
Only if it appears in the proposal. This retest shows the status of the vulnerabilities searched for within the tested scope.