Required before assessment
Requests should identify the company, contact, assets, purpose, and confirmation that the requester has authority to submit the systems for review.
Authorization policy
Authorization Policy for Cybersecurity Assessment
Security work must be authorized, scoped, and safe. This policy explains the boundaries Kintsubyte follows before reviewing any system.
Excluded by default
Denial-of-service testing, social engineering, physical testing, destructive exploitation, and third-party systems are excluded unless explicitly scoped and authorized.