Skip to content

Cybersecurity

Find the security holes in your website before criminals do

Authorized security testing for websites and online stores: we simulate attacks in a controlled way to find flaws and explain how to fix them.

Understanding the problem

A vulnerable website can be breached, leak customer data or be used to spread scams. Security testing — technically, a pentest — simulates, with your permission, what an attacker would try.

When this service helps

  • You're launching a new site, store or system.
  • Your site stores customer data or processes payments.
  • A client or partner requires proof of security testing.
  • No one has reviewed the site's security in a while.

How it works

  1. 01First contact. Describe your situation via Telegram or the form, without sending sensitive data.
  2. 02Initial review. We assess feasibility and explain what can be established.
  3. 03Proposal. You receive scope, timeline and price in writing, with e-acceptance.
  4. 04Execution. Work starts after a 50% payment, made once the proposal is accepted.
  5. 05Report. Once the work is done, the remaining 50% releases the full report.

How we analyze

  • Written definition of scope, dates and limits.
  • Testing of authentication, permissions, forms and configuration.
  • Checks for common flaws catalogued by references such as the OWASP Top 10.
  • Manual confirmation of every finding to avoid false alarms.

What you receive

  • A report with flaws ranked by severity.
  • Plain-language explanations and fix recommendations.
  • Optional retest after fixes.

Want your case assessed?

Describe the situation on Telegram. The initial review shows what can be established before any proposal.

Talk to a specialist (Telegram @investigacoesonline)

Technical and legal limits

  • We only test systems owned by the client or with the owner's explicit, valid authorization.
  • Testing reduces risk, but no test guarantees a system is 100% secure.

Frequently asked questions

Could the test take my site down?

The scope defines what's allowed. Anything that might affect availability is agreed in advance or run on a staging environment.

My site runs on an off-the-shelf platform. Do I need this?

Yes — settings, plugins and integrations are common sources of flaws.

Related guide: How to find security flaws in my website?

Want your case assessed?

Describe the situation on Telegram. The initial review shows what can be established before any proposal.

Telegram is an initial contact channel. Please don't send passwords or highly sensitive documents in the chat.

Related services