Check your external security posture in under a minute.

Rules of engagement v2026-10-03-draft-1

1. Parties. This authorization is between the organization named in this request (the "Client") and RYTECH Consulting Inc. ("RYTECH").
2. Scope. Testing is limited to the verified domain and the internet-facing hosts its public DNS records resolve to at the time of testing. Third-party platforms (for example shared hosting or SaaS providers) are excluded unless the Client confirms in writing that they may be tested.
3. Activities. RYTECH will perform a non-destructive, automated external vulnerability scan: port and service discovery, TLS and configuration checks, and checks for known vulnerabilities. No denial-of-service testing, social engineering, exploitation of findings, or attempts to access data will be performed.
4. Timing. The scan will run within 7 days of this authorization and typically completes within a few hours. Scan traffic may appear in logs or trigger security alerts.
5. Authority. The person signing confirms they are authorized to approve this testing on behalf of the Client for every system in scope.
6. Results. RYTECH provides a summary of results online and the full findings during a review. Results are treated as confidential and are not shared with third parties.
7. Limitation. The scan is a point-in-time assessment and does not guarantee the absence of vulnerabilities. RYTECH’s liability in connection with this scan is limited to the maximum extent permitted by law.
8. Withdrawal. The Client may withdraw this authorization at any time before the scan starts by emailing [email protected].