Security work requires disciplined handling.
The same precision applied to assessment scope should apply to customer information, access, reporting and communication.
Clear commitments without invented certifications.
Vensora’s security practices are described precisely. This page does not claim ISO 27001 certification, government accreditation or controls that have not been implemented.
Confidentiality
Customer assessment information is treated as confidential and used only for delivering authorised services and agreed communications.
Authorised testing
Security assessment occurs only against explicitly authorised systems and within documented boundaries. An enquiry alone never authorises testing.
Data minimisation
Only information reasonably needed to scope, perform, report and support the engagement should be collected and retained.
Secure transfer
Sensitive assessment reports should be delivered through an appropriately controlled transfer mechanism rather than an unrestricted public link.
Credential handling
Where credentials are needed for an authorised assessment, access should be limited, handled securely and not retained longer than necessary.
Responsible disclosure
Potential security issues affecting this website can be reported privately so they can be reviewed and addressed responsibly.
Send security concerns privately.
If you believe you have found a security issue affecting the Vensora website, provide enough information to reproduce and assess it. Do not access, modify or retain data that is not yours.
Please include the affected URL, a concise description, reproduction steps and potential impact. This channel is for issues affecting Vensora systems, not unsolicited scanning of third parties.
Need to understand how an assessment is controlled?
Review the full methodology or start a scope conversation with the person responsible for the work.