Start with an authorized scope.
Tell us which public-facing website or relevant codebase surface needs review, who owns it, and what decision the audit needs to support.
Know what is exposed.
Tell us what you need reviewed. We will scope the right audit before any testing begins.