Understanding the problem
A vulnerable website can be breached, leak customer data or be used to spread scams. Security testing — technically, a pentest — simulates, with your permission, what an attacker would try.
When this service helps
- You're launching a new site, store or system.
- Your site stores customer data or processes payments.
- A client or partner requires proof of security testing.
- No one has reviewed the site's security in a while.
How it works
- 01First contact. Describe your situation via Telegram or the form, without sending sensitive data.
- 02Initial review. We assess feasibility and explain what can be established.
- 03Proposal. You receive scope, timeline and price in writing, with e-acceptance.
- 04Execution. Work starts after a 50% payment, made once the proposal is accepted.
- 05Report. Once the work is done, the remaining 50% releases the full report.
How we analyze
- Written definition of scope, dates and limits.
- Testing of authentication, permissions, forms and configuration.
- Checks for common flaws catalogued by references such as the OWASP Top 10.
- Manual confirmation of every finding to avoid false alarms.
What you receive
- A report with flaws ranked by severity.
- Plain-language explanations and fix recommendations.
- Optional retest after fixes.
Want your case assessed?
Describe the situation on Telegram. The initial review shows what can be established before any proposal.
Talk to a specialist (Telegram @investigacoesonline)Technical and legal limits
- We only test systems owned by the client or with the owner's explicit, valid authorization.
- Testing reduces risk, but no test guarantees a system is 100% secure.
Frequently asked questions
Could the test take my site down?
The scope defines what's allowed. Anything that might affect availability is agreed in advance or run on a staging environment.
My site runs on an off-the-shelf platform. Do I need this?
Yes — settings, plugins and integrations are common sources of flaws.
Related guide: How to find security flaws in my website?