Loading this page
Process
Testing does not begin until you approve the quotation and the rules of engagement. You can do the whole path in writing. A call is not required.
You send the application, the API, and the reason for the test. The form does not start testing, and a call is not required.
ScnFix reviews the targets, roles, environment, and boundaries, and writes back if something is missing.
You receive a quotation in INR or USD. It names the scope, the deliverables, the retest, and the agreed schedule.
You approve the quotation and the rules of engagement. Testing does not start until both are agreed.
ScnFix assigns testers to that authorised engagement. Assignment is per project, not a public signup.
The team tests only the named scope, in the agreed window. Test accounts are used when you provide them.
Findings are validated and reviewed by a person before they are released. A tool alert is not the report.
You receive the PDF report. A completion letter is issued with a released report. It is not a compliance certificate.
After you remediate, you can request the included retest inside the window on the quotation. Saying an issue is fixed is not the result.
These are the labels in your project. They follow the steps above. Internal review notes stay with ScnFix until a finding is published.