RedifactProcess
How we work
From written authorisation to the report and agreed retest. Here is what to expect at each stage.
-
Authorisation
You name the assets. We write the scope, the rules of engagement, and a maximum invoice. Both parties sign. Until then, nothing is tested.
-
Test
The agreed assessment covers only the named systems. The assessment is remote and non-destructive. Work stays inside the signed scope and the signed rules.
-
Report
You receive a written report of verified findings. Each finding includes evidence, a severity band, and a recommended next step.
-
Retest
After you remediate, we retest the named findings. The retest belongs to the same assessment unless the signed scope says otherwise.
-
Close
The assessment closes when the report is delivered and any agreed retest is complete. Further testing needs a new signed scope.