FAQ
Frequently asked
questions.
Answers to the questions that come up most.
If one is missing, write to me.
Before you write
Open the question that applies to you.
Can your tests break my production?
The risk is controlled by scoping: precise scope, agreed windows, forbidden actions and stop conditions defined before any test. Destructive tests (denial of service) are out of scope. A critical vulnerability found along the way is reported to you immediately.
How long does an engagement last?
It depends on the scope. The number of days is estimated and validated at scoping, before the quote. Single day rate of €1,100 (excl. VAT), whatever the type of engagement.
What budget for a typical engagement?
Most engagements take a few days. The total is quoted at scoping from the scope, on the basis of the single day rate of €1,100 (excl. VAT), with no hidden fees.
What happens after the report?
A debrief meeting presents the results to your teams and helps prioritise fixes. Once those are applied, a retest checks their effectiveness and the report is updated.
Is my data protected?
Yes. Operational data is encrypted during the engagement and deleted at the end; only the report and necessary evidence are kept, encrypted, as per the contract. A non-disclosure agreement (NDA) can be signed on request.
Why an independent rather than a firm?
The person who scopes the engagement is the one who tests, writes the report and presents it to you: no sales intermediary, no junior quietly subcontracted. You gain clarity and a direct relationship.
Do you work with SMEs in Normandy?
Yes. SMEs, mid-caps and organisations in the region and beyond: the engagement is scoped to your context, on-site in Caen, Normandy and western France, or remotely anywhere in France.
What language do you work in?
Reports and debriefs are written and delivered in French, and in English on request.
Do you work remotely and outside Normandy?
Yes. Most tests (web, API, cloud, Linux systems over VPN) are run remotely. On-site work is done primarily in western France, and elsewhere as needed.
Am I legally covered?
No test is carried out without written authorisation signed by an entitled person and a validated scope (rules of engagement). If the tested system is not yours, the agreement of its owner or host is also required.
Do you work with firms as a subcontractor?
Yes, as pentest reinforcement for cybersecurity firms: web, API, cloud, Linux, Android and hardware scopes, reports in your format.
Let's discuss your needs
Describe the context, the intended scope and your timeline. I answer personally. Single day rate of €1,100 (excl. VAT).
Reply within a few business days, no commitment.