Frequently Asked Questions
This page answers the most common questions about Nokta Guard's penetration testing and digital forensics services, project process, confidentiality, pricing and reporting. Questions are grouped under six headings, and each answer is written to stand on its own.
Drag and drop, or click.01
Process & Confidentiality
How does a project get started?
Once you reach us via the contact form, email or phone, we hold a short initial call. We then complete the scoping form together, prepare a proposal and, with your approval, sign the contract and authorisation documents.
Do you sign non-disclosure agreements (NDAs)?
Yes. An NDA can be signed before any scope details are shared. All project information, findings and reports are kept in environments accessible only to the team members assigned to the project.
What authorisation is needed before testing starts?
Before testing begins, the system owner's written authorisation and rules of engagement defining the limits of the test are signed. If you use cloud or hosting services, the provider's testing policies are also followed. Testing does not start without these documents.
How are our data and test findings stored?
Reports, evidence and forensic images are stored in encrypted environments with access limited to authorised team members. Data is either not retained at all or kept for 3 or 6 months, as you prefer, and then securely destroyed.
Can tests be run outside business hours?
Yes. Tests that could affect live services can be scheduled at night, at weekends or in maintenance windows. Testing times are set out in writing in the rules of engagement.