FAQs

Vulnerability Assessment and Penetration Testing is a controlled, authorized simulation of real attacks against your systems. If your business holds customer data, processes payments, or runs any public-facing application, you need it — most breaches exploit flaws that a routine VAPT would have caught months earlier.

A focused web application test typically takes 1-2 weeks. Full infrastructure assessments run 2-4 weeks depending on scope. You receive a scheduling call, a rules-of-engagement document, the test window itself, and your report within five business days of testing completion.

Every course includes lifetime access to materials, all lab environments, recorded sessions for live cohorts, and a certificate of completion. Courses marked with certification preparation align to industry exams (CEH, OSCP, Security+).

Yes. Live cohorts are scheduled to cover Asia, Europe, Africa and the Americas. If a live time never fits you, every session is recorded and lab access is asynchronous — you never fall behind.

Add products to your cart and submit the order request at checkout. Our team confirms availability, sends a secure payment link (bank transfer or card), and delivers your license and downloads by email after payment clears. No card data ever touches our servers.

Digital products are refundable within 14 days if they have not been activated. Courses are refundable within the first week of a cohort. Engagements (VAPT, consulting) are refundable pro-rata for un-delivered work. See our Terms for details.

For your security, we do not use email-based reset links. Sign in to your account is required for password changes; if you are locked out, contact us with proof of account ownership and we will verify you manually.

Sign in, open your profile, and use "Delete account" in the danger zone — it requires your password and typed confirmation. Your personal data is permanently removed. You can also submit a deletion request without signing in from the Delete Account page.

Retainer clients get a 15-minute emergency hotline with immediate remote response. Non-retainer clients get best-effort response within 4 hours. Every IR engagement starts with containment — evidence preservation and root-cause analysis follow once the bleeding stops.

Yes — and that is the point. This site is built on a zero-dependency stack, ships strict Content-Security-Policy headers, validates every input server-side, hashes passwords with scrypt, rate-limits all sensitive endpoints, and protects every form with CSRF and captcha. We practice what we preach.