Question 1

What access do you need?

Accepted Answer

A read-only cloud role (one-click IAM setup) and, optionally, read access to your repositories. Everything is scoped to the environments you approve, and you can revoke it at any time.

Question 2

Is it safe to run against production?

Accepted Answer

Yes. Validation is non-destructive — exploit paths are proven with safe read-only checks that never mutate data. Most teams point us at staging; gray-box read-only against production is equally supported.

Question 3

What does the assessment cost?

Accepted Answer

For self-serve teams it is free. For enterprise engagements we charge a nominal assessment fee that is fully credited against your first program — it gives your security and procurement teams the contract vehicle they need to grant access.

Question 4

What happens after the readout?

Accepted Answer

You get exactly one priced recommendation, based on what the assessment found. There is no obligation — the report, the fix plans, and the attack-surface map are yours to keep either way.

Question 5

How fast is it, really?

Accepted Answer

Discovery starts the moment you connect, and your validated report is ready in minutes. Readout calls with a security engineer are capped each week — if the week is full, you get the next open slot.

Know your real exposure in minutes.