A client does not ask for “an audit of the whole company”. They ask whether the domain, the mail, or the repository looks abandoned. That question fits one target. A second target is a second order.
What counts as one target
You pick exactly one:
- A domain, together with its mail and the panel where you manage it.
- One organization on GitHub or GitLab.
- One mail tenant, not a group of companies.
Anything you did not name stays out of scope: a second domain, the office network, “the laptops while we are here”, a scan of a neighbor.
The sentence that starts the work
The order includes one sentence: you own the target, or you have the owner’s written permission. Without that sentence the review does not start and the payment is returned. I do not guess passwords, bypass a second factor, or write attack steps.
The method is a questionnaire plus exports or screenshots you share. A server login is not required. An offensive scan is not this service.
What you receive
A report of up to five pages: scope, what was not in scope, method, findings with priority, recommendations, limits. There is no score out of 10.
The fixed price is 349 PLN gross, five business days after complete input and payment. If the order contains the word “express”, you get one page in three business days: three findings, three gaps, three decisions, 149 PLN gross. Express is capped at two such orders a week.
A sample of how findings are written: sample assessment report.
When this is the wrong purchase
If you want to close your own freelancer workshop, with no one else’s target, take the 48h hygiene pack at 79 PLN gross. If an incident is already underway, recover access on a device you trust first. A baseline review does not take over a mailbox you do not own, and it does not promise a bank will reverse a transfer.
Order the baseline review with the form on the product page. tomek.st invoices it.