Question 1

Do you work under NDA and controlled disclosure?

Accepted Answer

Yes. Commitments are defined with legal review, controlled evidence handling, and disclosure rules aligned with your policy.

Question 2

How is scope defined before testing begins?

Accepted Answer

We start from objectives, in-scope assets, and systems explicitly out of scope. Scope is documented, signed, and frozen before escalating techniques or sensitive windows.

Question 3

What deliverables should we expect at closure?

Accepted Answer

Executive summary for leadership, technical report with severity and controlled reproduction steps, evidence packaged for engineering. Report language, format, and readout are covered in the following answers in this section.

Question 4

In what language is the report delivered, and can you use our corporate template?

Accepted Answer

Documentation language (English, Spanish, or bilingual delivery) and localization requirements are agreed in the SOW before the work plan is finalized. The typical structure combines an executive summary and a technical report with reproducible evidence; we avoid generic filler templates. If you provide a corporate template or framework, we incorporate it when the SOW defines it.

Question 5

Is the stakeholder readout session included?

Accepted Answer

The stakeholder readout session is not included by default: it is optional and formalized in the SOW (audience, duration, and goals). It complements the written report and does not replace it.

Question 6

Can you validate fixes after remediation?

Accepted Answer

Yes. We run focused retests within the window agreed in the SOW and update finding status with reviewed evidence.

Question 7

Do you account for jurisdictional or export restrictions?

Accepted Answer

We align delivery with your legal and jurisdictional requirements. If restrictions apply, we document them up front in the engagement plan.

Question 8

How do we start a conversation with Fortress Offensive Security?

Accepted Answer

Use the contact page or the briefing request link on the home page: we respond with a short intake note and schedule a discovery call.

Engagement logistics, clarified from the start.