Question 1

Do you need access to our codebase or admin panel?

Accepted Answer

No. We test your product entirely from the outside — the same way an abuser would. We only need your public trial signup URL.

Question 2

What exactly do we receive?

Accepted Answer

A detailed guidebook covering every vulnerability we found, ranked by severity, with specific remediation steps, tool recommendations, and configuration instructions.

Question 3

What if we need help implementing the fixes?

Accepted Answer

Our guidebook is designed to be self-service. However, we can recommend implementation partners or provide extended consulting for complex cases.

Question 4

Is our data safe during testing?

Accepted Answer

We only interact with your product as a regular user would. We don't extract, store, or process any customer data beyond what's visible in the normal trial experience.

Question 5

Do you sign an NDA before starting?

Accepted Answer

Yes, we are more than happy to sign a mutual NDA before any engagement begins. However, it is rarely necessary as we only interact with your publicly available trial from the outside—exactly as a normal user would. Regardless, confidentiality remains fundamental to how we operate.

Question 6

What's your typical turnaround time?

Accepted Answer

The free Quick Evaluation is delivered within 48 hours. A full audit and guidebook typically takes 5–10 business days, depending on the complexity of your trial system.

Question 7

Do we need to provide any technical documentation?

Accepted Answer

No. We only need a link to your public trial signup page. We approach everything from the outside, just like a real user or abuser would.

Question 8

How do you handle data privacy and GDPR compliance?

Accepted Answer

We only interact with your product as a normal user. We don't access, extract, or store any customer data. All test accounts we create are disclosed in our report.

Question 9

Can you test mobile apps or only web platforms?

Accepted Answer

We primarily focus on web-based trial flows, but we can also assess mobile app trials if they have a web signup component or API-based registration.