Questions buyers usually ask before booking.

Yes. The intro call is used to understand your needs, explain suitable assessment options and confirm whether there is a good fit. It is a conversation only — not a free report, free OSINT, free scan, or permission to test.

Not always. Many businesses benefit from a focused exposure review first, especially when they need visibility quickly or have a limited initial budget. See You do not always need a full pentest first.

Yes. Most web, external infrastructure, OSINT and firewall reviews can be handled remotely with clear scope and authorisation.

Yes. Testing only happens against agreed assets with permission, defined scope, prerequisites and safety constraints confirmed before assessment work begins. Read Authorised only.

Only with the owner’s written authorisation. Otherwise we refuse. The intro call does not create permission.

No. We do not sell CE+ or Cyber Essentials certification. We can do a focused technical assessment (Web / Infra / OSINT / Firewall) if that still helps — or we will say it is not a fit.

You get a debrief call to walk through the findings, clarify fixes and decide whether a retest or further assessment is useful. See What you get.

Yes. A focused first review is often the best route for a new client because it proves value quickly without requiring a large commitment. Use Start here to match your main concern.

No. The same specialist scopes, assesses and debriefs. Intentionally small. Founder-led delivery is the point.

Book Calendly when you can talk now. Use the form or email hello@boundaryproof.co.uk when you need to write context first. Same careful process either way.