Describe the context
Share the business trigger, system and deadline—without technical secrets.
BEFORETHE HACK
Pentests, assessments and compliance readiness
We find risksbefore theyfind you.
Has a customer, compliance requirement or launch created a security need? Describe the situation, even if you do not yet know which service is appropriate.
Accepted needs
Three families. One entry point.
We review testing, technical assessment and security or compliance-readiness needs without promising availability before a qualified firm has been verified.
- 01Penetration testing for websites, SaaS, applications, APIs, mobile, cloud or infrastructure
- 02Vulnerability, attack-surface or architecture assessments
- 03Cloud configuration, code review and application-security assessments
- 04Security readiness, customer requirements and compliance preparation
How it works
From trigger to the right specialist.
Before the Hack does not deliver the technical engagement. The selected independent firm defines the scope, proposal and contract, performs the work and invoices you directly.
We check the fit
We verify that the request is complete and look for a firm able to cover the required service and territory.
You stay in control
Nothing is shared until you approve a specifically named firm.
Transparent selection
The partner must earn the introduction.
Before any introduction, we check the firm’s fundamentals.
- Verifiable identity and insurance
- Web/API experience
- Contractual and authorisation framework
- Report quality and retest
- Confidentiality and transparency
Before the Hack may receive a referral fee from the selected provider. This does not transfer technical responsibility to Before the Hack.
Frequently asked questions
A simple role, clear boundaries.
Who delivers and invoices the engagement?
The selected independent firm scopes, contracts, delivers and invoices the work. Before the Hack prepares the introduction.
Can I submit a need other than a pentest?
Yes. We also review technical assessments, cloud or code audits and security or compliance-readiness needs. Availability is confirmed only after a suitable firm has been verified.
Is a meeting with Before the Hack required?
No. A complete request can be reviewed from the form. We only ask a follow-up question if essential information is missing.
Are my details shared automatically?
No. Separate approval is required before anything is shared with a specifically named firm.
Start with the trigger
Tell us what changed.
Customer request, launch, compliance or production concern: share the essential context, without sensitive information.