No High, no pay.

You pay the flat fee upfront. If the hunt finds no validated High or Critical in the agreed scope, you get the money back. CVSS-scored, human-validated, in the signed report.

How it runs

  • 01 · contract

    Scope, in writing

    Contract, scope and prohibited techniques are fixed before we start, all in writing.

  • 02 · payment

    Flat fee, upfront

    You pay the flat fee at the start of the engagement. No metering, no credits, no per-scan charges.

  • 03 · the hunt

    Hunted, validated

    Every finding is validated by a named researcher with a PoC and scored on the CVSS scale before it reaches the report.

  • 04 · report

    The signed report

    A validated High or Critical in the agreed scope: the report stays with you, so does the fee. None: the money comes back.

What counts

A finding counts only if it meets all three criteria: the CVSS band, human validation, and the agreed scope.

Critical9.0 – 10.0
counts
High7.0 – 8.9
counts
Medium4.0 – 6.9
does not count
Low / Info0.0 – 3.9
does not count

What does not count

  • Findings below High (Medium, Low, Info), even combined.
  • Findings outside the agreed scope.
  • Unvalidated alerts; no working PoC, no finding.
  • Known issues reported before the engagement started; an engagement is not a fix backlog.
  • Internal networks, mobile and cloud: separate fixed-in-writing modules.
  • Engagements that did not run: missing access, changed scope, techniques not executed.

The refund

  • 100 % of the fee for the period tested.
  • Within 14 days of the signed report being delivered.
  • Back the way it came, confirmed in writing.

This page is the summary. The contract is authoritative: scope, prices and the refund are fixed there, in writing.

Start with the free checkHow the hunt runs