Security testing starts with permission and a shared understanding of what is in scope.
Authorization and scope
Before an assessment, the asset owner and testing team must agree on targets, exclusions, permitted techniques, timing, and escalation contacts. A website inquiry never authorizes testing.
Evidence and human review
The Turix approach connects observations to evidence and analyst decisions. The website workflow uses synthetic examples; it does not run a live scan.
Discuss your requirements
Data residency, retention, access controls, confidentiality, subprocessors, and incident communications must be agreed for your engagement. Contact us to discuss your security questionnaire and contracting needs.
Report a website concern
Use our responsible disclosure instructions for a suspected vulnerability in Turix-owned assets.