Written authorization and scope
Evaluate agreed systems with controlled testing and an actionable report.
Authorized penetration testing
Test your defenses within an agreed scope.
Evaluate agreed systems with controlled testing and an actionable report.
Project valueQuoted to scopeNo payment before scope agreement
DeliveryAgreed with your quoteScoped after discovery; after brief, access and approvals
Your first milestoneAuthorize the scopeA useful review point before the next stage
Evidence that guides the next action
Practical remediation priorities
We separate findings by impact and explain how to reproduce or verify them. The outcome is a focused action plan with clear scope and limitations.
Verification of agreed fixes
Findings are tied to evidence and prioritized next steps within the authorized scope.
In our clients’ words.
“We are looking forward to using our new website to attract more customers and also look forward to working with him again.”
“I am sure we’ll work together again.”
“I believe the website speaks volumes as to the quality of work ICM can produce.”
WHAT YOU RECEIVE
Your Authorized penetration testing project, clearly defined.
Owners of authorized websites, applications and systems who need an assessment or scoped remediation.
Rules of engagement
Agree authorized targets, permitted techniques, test times and stop conditions in writing before testing. Third-party assets and production-impacting actions require explicit authorization.
Testing
Run agreed representative cases and record the outcome and remaining limitations. Results identify the tested environment and coverage; they do not imply that every device, attack or future business condition was tested.
Findings and retest option
Run agreed representative cases and record the outcome and remaining limitations. Results identify the tested environment and coverage; they do not imply that every device, attack or future business condition was tested.
Scope and requirements
No third-party targets or destructive testing without explicit authorization.
Any additional work is scoped and priced for your approval.
THE DELIVERY PATH
From your brief to the finished work.
Follow the preparation, review and delivery stages for this service.
Authorize the scope
Agree assets, methods, exclusions, data handling and test windows.
Assess the system
Use the approved checks and document reproducible findings.
Prioritize remediation
Explain impact, ownership and recommended next steps.
Verify agreed improvements
Retest the scoped fixes and document any remaining limitations.
What is included?
Includes Rules of engagement, Testing and Findings and retest option. No third-party targets or destructive testing without explicit authorization.
Does an audit certify legal compliance?
No. Technical assessment and remediation support legal and compliance work but do not replace qualified legal advice or an independent certification.
Can you test a third-party system?
Only with explicit authorization from the system owner and within the agreed rules.
Are all future vulnerabilities covered?
An assessment applies to a defined scope and time. Ongoing monitoring and future work require their own agreement.
Related services
YOUR NEXT LEAP STARTS HERE
Ready to put Authorized penetration testing to work?
Share the change you want to make. We will help turn it into a clear, practical project.