Questions, answered

What Cyberquid does, what it needs from you, and the lines it never crosses.

Is this legal?

Testing a system without permission is a crime, whatever the intent. Cyberquid tests only what a signed engagement covers, signed by someone entitled to authorize those systems, and a person confirms that before the signature is recorded.

Who can apply?

Companies that own the systems they name, or are authorized to have them tested. A person reviews every application.

What is the difference between Defensive and Offensive?

Defensive keeps you safe day to day: it finds weaknesses, proves which are real, drafts the fixes and watches for attacks. Offensive is authorized red teaming and penetration testing: it attacks the systems you name, only for as long as you sign for. You can have both.

What do you need from us?

A signed scope: the systems in, the systems off limits, the dates, and a contact on your side. For Defensive, read access to the code, cloud accounts and logs you choose.

Can you test systems that run on a cloud provider?

Yes, within that provider's own testing rules. Most allow you to test your own resources and forbid some things outright, such as denial-of-service testing, which Cyberquid never does.

Can we stop a test?

At any time. Withdrawing permission ends the engagement, and every connection after that is refused.

Will Cyberquid change anything in our systems?

Not without your approval. Fixes are drafted and explained for your team, and a person on your side approves each one before anything changes.

Can it test our own AI?

Yes. If your company runs AI of its own, Cyberquid tests it for hidden instructions, leaked secrets and actions taken without a person saying yes.