RedifactAgree the boundaries
Both parties sign the named systems, rules of engagement, and maximum invoice.
Independent security assessments
Know your exposure.
Own your next move.
Authorised assessments of your websites, applications and APIs. Human-verified findings. Clear fees. A scope you control.
Written authorisation first. Always.
THE REDIFACT APPROACH
A defined boundary.
01 Named systems02 Verified findings03 Agreed fee cap
01 Written scope02 Human verification03 No qualifying finding, no fee
A focused engagement
Your public systems.
A clear boundary.
A focused assessment of the systems your business puts online, with boundaries agreed before work begins.
Redifact assesses named public-facing websites, applications, APIs, and internet-facing infrastructure. Every engagement is remote and non-destructive.
Explore the scopeThe deliverable
A report you
can act on.
Understand the risk. Decide what comes next.
Your written report brings together verified findings, their severity, and recommended next steps. The agreed retest follows remediation.
See the engagement processSecurity assessment
Fictional example · Example Company customer portal
Executive summary
A concise overview of the agreed scope, confirmed risks, and decisions needed by the business.
Risk priorities
Verified findings organised by severity, with evidence and business impact to support prioritisation.
FindingSeverityBusiness impact
Remediation and retest
Recommended next steps and the outcome of the agreed retest after changes are made.
Structure only. No assessment has been performed and no client results are shown.
Transparent by design
Pay for findings.
Not uncertainty.
Only verified, in-scope findings qualify. Each bills at its severity band, up to your signed assessment cap.
Default assessment cap$15,000 USD
Read the full fee rules Severity tariff
USD / FINDING| Severity | Fee |
|---|---|
| Info | $0 |
| Low | $500 |
| Medium | $1,500 |
| High | $4,000 |
| Critical | $10,000 |
| Assessment cap | $15,000 |
Standard defaults in USD. Binding only when signed.
No qualifying finding means no fee.
From scope to clarity
A considered process.
A defined finish.
Assess and verify
Work stays within the signed scope. A human verifies each finding before it can be billed.
Report and resolve
Receive the evidence, severity, and recommended next steps. Complete the agreed retest.
Start with a conversation
What would you like
to understand better?
Discuss your systems An enquiry starts a conversation. It does not start a test.