RedifactAgree the boundaries
Both parties sign the named systems, rules of engagement, and maximum invoice.
Independent security assessments
Know your exposure.
Own your next move.
Authorised assessments of your websites, applications and APIs. Human-verified findings. Clear fees. A scope you control.
Written authorisation first. Always.
-
Agree the scope
Named systems. Written boundaries.
-
Human verification
Assess in scope. Review the evidence.
-
A written report
Clear evidence. Practical next steps.
01 Written scope02 Human verification03 No qualifying finding, no fee
A focused engagement
Your public systems.
A clear boundary.
A focused assessment of the systems your business puts online, with boundaries agreed before work begins.
Redifact assesses named public-facing websites, applications, APIs, and internet-facing infrastructure. Every engagement is remote and non-destructive.
Explore the scopeThe deliverable
A report you
can act on.
Verified findings, their severity, and recommended next steps. The agreed retest follows remediation.
See the engagement processAssessment report
Executive summary
Agreed scope, confirmed risks, and decisions for the business.
Verified findings
Evidence, severity, and business impact for each verified finding.
Remediation and retest
Recommended fixes and the outcome of the agreed retest.
Structure only. No assessment has been performed and no client results are shown.
Transparent by design
Pay for findings.
Not uncertainty.
Only verified, in-scope findings qualify. Each bills at its severity band, up to your signed assessment cap.
Default assessment cap$15,000 USD
Read the full fee rules Severity tariff
USD / FINDING| Severity | Fee |
|---|---|
| Info | $0 |
| Low | $500 |
| Medium | $1,500 |
| High | $4,000 |
| Critical | $10,000 |
| Assessment cap | $15,000 |
Standard defaults in USD. Binding only when signed.
No qualifying finding means no fee.
From scope to clarity
A considered process.
A defined finish.
Assess and verify
Work stays within the signed scope. A human verifies each finding before it can be billed.
Report and resolve
Receive the evidence, severity, and recommended next steps. Complete the agreed retest.
Start with a conversation
What would you like
to understand better?
Discuss your systems An enquiry starts a conversation. It does not start a test.