Remote or on-site?
Both — after scope is clear. Much of the work (configuration review, exposure review, account triage, documentation) can be remote. On-site when the hardware, local network or evidence handling requires it.
Only Zawiercie?
No. The locality in the footer is a contact point, not a coverage limit. Remote — nationwide and abroad; travel is agreed separately.
Which language?
Polish and English — the site, docs and correspondence.
How fast do you reply?
Phone: phone temporarily unavailable. Form replies usually within 1 business day. That is not a round-the-clock SOC or a guaranteed attacker-eviction SLA — see collaboration terms.
What do you not take on?
Unauthorised testing, bypassing third-party controls, “full SOC on subscription” without a written scope, guarantees of recovering money after fraud, and marketing “9/10 security” scores. Details: collaboration.
What is the first step?
Start from choosing a path (quote, consultation, engagement) or describe the problem in the form. You get a proposed scope (or a clarifying question), then terms and start. For an incident: read the intake card on the contact page (SOC / IR topic) first, then the form.
Is sending the form a contract?
No. It is an inquiry. Contract and invoice come after scope is agreed.
Where do inquiry and engagement data go?
Form: server copy for up to 12 months, confirmation from hello@tomek.st without quoting the message. Engagement material (logs, images,
notes) — separate rules on Privacy. Do not paste disk images
into the form.