No High, no pay.
You pay the flat fee upfront. If the hunt finds no validated High or Critical in the agreed scope, you get the money back. CVSS-scored, human-validated, in the signed report.
How it runs
- 01 · contract
Scope, in writing
Contract, scope and prohibited techniques are fixed before we start, all in writing.
- 02 · payment
Flat fee, upfront
You pay the flat fee at the start of the engagement. No metering, no credits, no per-scan charges.
- 03 · the hunt
Hunted, validated
Every finding is validated by a named researcher with a PoC and scored on the CVSS scale before it reaches the report.
- 04 · report
The signed report
A validated High or Critical in the agreed scope: the report stays with you, so does the fee. None: the money comes back.
What counts
A finding counts only if it meets all three criteria: the CVSS band, human validation, and the agreed scope.
What does not count
- Findings below High (Medium, Low, Info), even combined.
- Findings outside the agreed scope.
- Unvalidated alerts; no working PoC, no finding.
- Known issues reported before the engagement started; an engagement is not a fix backlog.
- Internal networks, mobile and cloud: separate fixed-in-writing modules.
- Engagements that did not run: missing access, changed scope, techniques not executed.
The refund
- 100 % of the fee for the period tested.
- Within 14 days of the signed report being delivered.
- Back the way it came, confirmed in writing.
This page is the summary. The contract is authoritative: scope, prices and the refund are fixed there, in writing.