Working method
Six beats from first call to closing walkthrough
This is the shape of a typical engagement. We shorten it for a pre-launch pass and stretch it when ledgers need a longer sample. The point is always the same: named evidence, not atmosphere.
-
Intake
We ask what the application does with money and identity, which journeys matter this quarter, and who can grant staging access. You do not need a polished brief. You do need one owner who can answer within a working day.
-
Access and sampling
We agree a window of logs, a test customer that can complete the in-scope journeys, and — when it exists — one messy ticket from the last few months. Sampling is structured, not “show us everything”.
-
Walk the product
We run the journeys on the build you name. We fail them on purpose. We sit with operations long enough to see whether a human can reconstruct what the customer saw.
-
Write the pack
Findings are ordered by harm: money, identity, customer confusion, then operational drag. Each item has reproduce steps and a pointer to a screen, job, or log row.
-
Walkthrough
We talk through the pack with product and operations in the same sitting. Disagreement is useful; we would rather be corrected in the room than leave a polite fiction behind.
-
Optional re-check
If you patch the high-severity items, we can re-run those journeys on a later build. A re-check is scoped separately and only covers what we already named.
What we need from you
- Staging or equivalent that resembles production for the journeys in scope
- A test identity that can complete those journeys
- Someone who can explain a recent dispute or incident
- Written permission to use the environments we are given
What we will not do
- Attack systems we have not been invited to review
- Issue a legal opinion or a licence recommendation
- Replace your counsel, your pentester, or your internal audit team
- Publish your findings or name you without written agreement
If this method fits the review you need, send a short note. We will tell you whether we can take the dates you have.
Ask for dates