Fit
When you should not hire us.
A useful security partner tells you when not to buy. That narrowness is intentional.
BoundaryProof focuses on Web, API, External Infrastructure, OSINT and Firewall reviews for authorised UK businesses. That means we are the wrong choice in several situations.
You need unauthorised testing
If the work would be against a third-party target without the owner’s permission, we will not take it. Get authorisation first, or use a lawful channel.
You need a huge multi-team programme on day one
If you need a large multi-team programme with account managers and steercos before anyone touches an asset, we are not that firm. We deliver practical exposure reviews with direct access to the assessor.
You only want a certificate sticker
If the goal is a logo for a slide and no interest in fixing findings, we will be a frustrating partner. Reports are built for remediation and debrief, not theatre.
Your need sits outside the five services
Malware labs, physical intrusion, assessing arbitrary internet companies, managed SOC / detection, or indefinite “hacking on demand” are not the offer. If your need is clearly something else, the intro call is where we say so.
You cannot identify who authorises scope
Shared environments and client systems need clear permission. If nobody can authorise, we cannot start. That protects everyone.
A quick self-check
Can you authorise the assets? Do you want findings you will actually fix? Does your need map to Web, API, External Infrastructure, OSINT or Firewall? Are you comfortable with a direct specialist rather than a large account team? If yes, it is worth a free intro. If authorisation or the will to fix findings is missing, this will not be a useful engagement.
Related: When not to hire us (blog) · Authorised only · Start here · Services
Ready to talk it through?
If the self-check looks like a fit, book a free intro. If not, you have saved both of us time — which is also a successful outcome.