Scope of Security Assessments

This page explains what is generally included in a PHPsecPro assessment, and what requires separate agreement. Exact scope is confirmed in writing for each engagement.

Typically Included

• Review of PHP version, core platform version, and major dependencies.
• Review of plugins, extensions, or modules for known, publicly disclosed vulnerabilities.
• Review of common configuration risks (permissions, exposed files, access controls).
• A findings summary with practical, prioritized recommendations.

Requires Separate Agreement

• Active penetration testing or exploitation of identified vulnerabilities.
• Incident response for an active, ongoing attack.
• Testing of third-party systems not owned or controlled by the client.
• Work outside the agreed platform, environment, or time window.

Authorization

We require confirmation that you own or are authorized to request assessment work on the website or system in scope before any paid work begins.

No Guarantee

An assessment reduces risk by identifying known issues at a point in time. It does not guarantee that a website is, or will remain, free of vulnerabilities.

Contact

To discuss scope for your website, reach us via WhatsApp at +91 73309 37354.