Question 1

Do you need access to our codebase or admin panel?

Accepted Answer

No. We test your product entirely from the outside, the same way an abuser would. We only need your public trial signup URL.

Question 2

What exactly do we receive?

Accepted Answer

A detailed guidebook covering every vulnerability we found, ranked by severity, with specific remediation steps, tool recommendations, and configuration instructions.

Question 3

What if we need help implementing the fixes?

Accepted Answer

Our guidebook is designed to be self-service. However, we can recommend implementation partners or provide extended consulting for complex cases.

Question 4

Is our data safe during testing?

Accepted Answer

We only interact with your product as a regular user would. We don't extract, store, or process any customer data beyond what's visible in the normal trial experience.

Question 5

Do you sign an NDA before starting?

Accepted Answer

Yes, we are more than happy to sign a mutual NDA before any engagement begins. However, it is rarely necessary as we only interact with your publicly available trial from the outside, exactly as a normal user would. Regardless, confidentiality remains fundamental to how we operate.

Question 6

What's your typical turnaround time?

Accepted Answer

The free Quick Evaluation is delivered within 48 hours. A full audit and guidebook typically takes 5–10 business days, depending on the complexity of your trial system.

Question 7

Do we need to provide any technical documentation?

Accepted Answer

No. We only need a link to your public trial signup page. We approach everything from the outside, just like a real user or abuser would.

Question 8

How do you handle data privacy and GDPR compliance?

Accepted Answer

We only interact with your product as a normal user. We don't access, extract, or store any customer data. All test accounts we create are disclosed in our report.

Question 9

Can you test mobile apps or only web platforms?

Accepted Answer

We primarily focus on web-based trial flows, but we can also assess mobile app trials if they have a web signup component or API-based registration.