Projects & Reports

Our Project Workflow

Every project begins with your inquiry and concludes with a joint closing discussion. We are, of course, happy to adapt the timeline for scoping and kickoff to your specific requirements.

Inquiry

With us, there are two ways to get your quote:

If you already know what you need, you can easily request a quote via our online configurator. The quote will be sent to you on the next business day.
We are happy to discuss your individual questions and wishes with you in a scoping meeting. You will receive the quote one business day after this meeting. A scoping meeting takes approximately 30–60 minutes. Organizational and technical contacts from your side should be present. Based on our sample agenda for a scoping meeting, you can already assess who the right contacts are and directly schedule an appointment using our calendar function on the contact page.

Order

After your order, you will receive a checklist for preparation. This also serves as the agenda for the kickoff.

Scoping

If you ordered via the online configurator, the scoping meeting will now follow, during which we will get to know the test object. Depending on the test object, the scoping meeting may also serve as the kickoff meeting.

In addition, we will jointly determine the execution period. We will take your preferred date into account as best as possible.

Kickoff

We will schedule a kickoff meeting approximately 1–3 weeks before the start of execution to discuss all technical and organizational preparations. Based on our sample agenda for a kickoff meeting, you can already assess who the right contacts are.

Pentest / Red Teaming

Now we search for vulnerabilities for you. We will notify you when we start the project and when we are finished. By arrangement, we will also keep you updated in between – for longer projects, we do this anyway.

We always report critical vulnerabilities immediately.

Report

You will receive the report from us no later than 5 business days after the end of the execution.

You can find more information about the report further down on this page.

Closing Discussion

After the project, there will be a closing discussion. We will determine the timing so that the discussion provides the greatest benefit for you. A time after all participants have had time to review the report has proven to be effective.

We are also happy to continue supporting you with coordination, prioritization, and defining remediation measures after the project.

Management Presentation

Optionally, but always included, we offer a 15–30 minute management presentation. We present the results at a high level and address management’s questions.

What is the results report and for whom is it?

No matter what type of project you order: after the project, you will always receive a results report.

It is important to us that all stakeholders receive the information relevant to them. This means:

Management can quickly assess the overall picture and make targeted decisions for measures. As a basis for prioritization, our recommendations for action include an estimate of the remediation duration, budget expenditure, and urgency. To ensure clarity, we group related findings for you.
Technical managers can understand the findings in detail. This allows them to keep track of all relevant points during technical remediation and consider them in the future.

After a Management Summary and a Technical Summary, for each finding, there is:

Risk-based assessment and classification according to CVSS
Textual explanation of “What can happen under what circumstances?”
Recommendations for remediation, possibly divided into short-term and medium-term measures
Technical steps to understand how we found vulnerabilities
Useful external sources

The report is what remains after the project

Sample reports

Pentest
Infrastructure

Pentest
Web application

Red Teaming

Excel appendix

Exemplary for infrastructure

The report is designed to make it as easy as possible for you to work with the results. That's why we place great importance on a clear and understandable presentation for everyone from techies to management. You will receive the report no later than 5 business days after the end of the execution.

Feel free to take a look at our sample reports!

By the way, this is what our clients say about the report:

The final report described the findings very precisely and contained good recommendations that we were able to implement very quickly.

The documentation was very clear, well-explained, and we also appreciate the additional documents we received.