How a POC runs

A real engagement, run small.

No pilot theatre, no sandbox demo. The same loop we run for paying clients, scoped to one domain and a fixed window.

  1. 01

    Scope

    A 30-minute call to agree what is in bounds and what we may prove. Signed before anything runs.

  2. 02

    Survey

    Agents attribute your external surface from public trails. You see the catalogue within the first week.

  3. 03

    Proof

    An operator walks whatever is reachable and hands you the path, the evidence and the fix.

Most of what an attacker can reach was never on your list.

Proof of concept

Let’s expose your real attack surface

Give us a company name. We attribute what the internet already says about you, attack what matters, and hand back the paths we proved.

We test only what you authorise, and nothing before the scope is signed. We store this information to respond to your request and you may ask us to delete it at any time. See our Privacy Policy.

An operator replies within a day