the guarantee

No High, no pay.

You pay the flat fee upfront. If the hunt finds no validated High or Critical in the agreed scope, you get the money back. CVSS-scored, human-validated, in the signed report.

How it runs

01 · contract

Scope, in writing

Contract, scope and prohibited techniques are fixed before we start — all in writing.

02 · payment

Flat fee, upfront

You pay the flat fee at the start of the engagement. No metering, no credits, no per-scan charges.

03 · the hunt

Hunted, validated

Every finding is validated by a named researcher with a PoC and scored on the CVSS scale before it reaches the report.

04 · report

The signed report

A validated High or Critical in the agreed scope: the report stays with you, so does the fee. None: the money comes back.

What counts

A finding counts only if it meets all three criteria: the CVSS band, human validation, and the agreed scope.

Critical9.0 – 10.0
counts
High7.0 – 8.9
counts
Medium4.0 – 6.9
does not count
Low / Info0.0 – 3.9
does not count

What does not count

  • Findings below High (Medium, Low, Info) — even combined.
  • Findings outside the agreed scope.
  • Unvalidated alerts — no working PoC, no finding.
  • Known issues reported before the engagement started — an engagement is not a fix backlog.
  • Internal networks, mobile and cloud — separate fixed-in-writing modules.
  • Engagements that did not run: missing access, changed scope, techniques not executed.

The refund

  • 100 % of the fee for the period tested.
  • Within 14 days of the signed report being delivered.
  • Back the way it came, confirmed in writing.

This page is the summary. The contract is authoritative: scope, prices and the refund are fixed there, in writing.

Start with the free checkHow the hunt runs