Can we buy only the assessment?
Yes. We can scope an assessment-only engagement. Remediation and any change pilot are separate purchases and approvals. Delivery depends on service readiness and agreed terms.
Can another provider use the results?
The proposed engagement should permit your internal team or an authorised provider to use your deliverables for remediation, subject to confidentiality and third-party licensing terms. Confirm these rights in the signed statement of work.
Will you scan all our cryptography?
We assess the systems and observation types accepted in writing. The first offering focuses on TLS and SSH endpoint observations over IPv4 and the certificate material visible through those observations. Other channels need separate scope acceptance. The report states what was and was not observed.
What can two scanners tell us?
Cross-checking can expose disagreements within overlapping supported coverage. It does not guarantee that every system was observed. The report identifies untested areas and unresolved differences. Two-scanner checking is an expression of interest until the tools, coverage and delivery workflow have passed their checks.
Does a signed receipt establish that our systems have been migrated?
No. A receipt binds the recorded evidence to its issuer under the applicable verification rules. It does not prove that every asset was discovered or that your systems have been migrated.
Will you change our systems during assessment?
No configuration change is included. Any later change requires its own approved plan and engagement.
What will it cost?
Fees depend on agreed scope, observation windows, analysis and deliverables. We confirm a quote before accepting work. No public price is promised here.
Is ongoing monitoring included?
No. A point-in-time assessment or separately arranged re-scan does not include a recurring monitoring service. A re-assessment requires a separately agreed scope and written observation authority; comparisons depend on compatible evidence.
Can we start today?
You can discuss your scope with us today. Assessment delivery and the separate change pilot each depend on their own readiness and approval checks. An enquiry does not authorise scanning or a change to your systems. Customer migrations have not been completed, and we do not claim they have.
Do we have to replace our discovery tools?
No. Your scanners' CycloneDX exports are designed to enter through the same ingest as ours, labelled as inventory. Import support is in development, and an import is not evidence that a change occurred. Our part is the evidence that the change happened.
What makes this evidence stronger than a report?
Each step is designed to be a signed receipt from the same engine, minted at the point of action, chained, and checkable offline in two languages without trusting DCS. A non-author re-runs the bundle before it counts.
Will hybrid break clients that are not ready?
Hybrid key exchange negotiates down for peers that do not support it, and every fallback is recorded as a degraded handshake. Nothing is forced until both ends are ready.
What about devices that cannot be upgraded?
A gateway can protect supported communication paths and record evidence for legacy devices. It does not upgrade the cryptography inside every device. Assessment determines whether a device can be adapted, isolated, replaced or decommissioned. See the OT / IoT programme.