When it is requested
An owner who wants the service behind the app reviewed, limited to hosts and domains they control.
What the assessment covers
- 01The scope names the service and the assets in play. It does not widen to what was never agreed.
- 02The review is of the agreed API and server, under written authorization from the asset owner.
- 03The result describes findings, severity, and remediation guidance for management and engineering.
- 04No files or sign-in secrets are sent from this page. Operational detail is not published on the site.