Every engagement begins with a ninety-minute technical scoping session against your architecture. There is no commercial commitment, and no material needs to leave your environment for it to be useful.
Do not include sensitive architectural detail, credentials, or client data in this form. It is sufficient to describe the system in general terms; the technical exchange happens under NDA.
We ask that no client data, architecture documentation, or credentials be sent by unencrypted email at any stage.
An encryption key for sensitive correspondence is provided on request, with the fingerprint confirmed out of band before anything is transmitted. Ask before sending material you would not send in the clear.
If you have identified a security issue in Averon's own infrastructure, or in a system you believe we assess, write to admin@averon.systems. We acknowledge within one business day and will agree a disclosure timeline with you. We do not operate a bounty programme and we do not require you to accept non-disclosure terms in order to report.
Not prerequisites. If you can answer these, the scoping session will be shorter — and if you cannot, that is itself a useful result.