Disclaimer

1. Security testing has limits

A security audit describes what was found in a defined scope during a defined window. It is not a guarantee that no other vulnerability exists, and it is not a certification. Any statement that a system is "secure" means only that the tests performed did not find a way in.

2. Testing requires your authorisation

We test only what you have authorised in writing, and only where you have the authority to authorise it. If the system is hosted or operated by a third party, getting their permission is your responsibility.

3. Published writing is general, not advice

Articles, talks and course material on this site are general information. They are not advice about your specific system, and acting on them without checking whether they apply to you is your own decision.

4. No professional advice

Nothing here is legal, financial or regulatory advice. Where a security finding has legal or compliance consequences, take proper advice on those.

5. External links

Links to other sites are for convenience. We do not control them and are not responsible for their content or their security.