FAQ | Nyorsoft

Do you need access to our internal systems?

No. These services are designed to assess the public-facing parts of your website and digital footprint without requiring internal access. You simply send us the domain you want reviewed, confirm authorization, and we handle the rest.

Do you need login credentials?

Not for these packages. Our reviews are focused on what is publicly visible and accessible. If you later want authenticated testing — assessing what happens after login — we can scope that as a separate service.

Is this a full penetration test?

No. These services are focused on public-facing review and external exposure. A full authenticated penetration test would require a separate scope and usually test accounts. Our services are designed to give small businesses a professional external security baseline without the complexity of a full engagement.

Can you review more than one website?

Yes. We can expand the scope to include additional domains or subdomains. Additional domains and subdomains can be added as optional add-ons, or we can scope a Custom Scope Review for businesses with multiple public-facing assets.

Do you provide remediation guidance?

Yes. Every package includes recommendations, and higher-tier packages include more structured remediation guidance. We explain what matters, what the likely impact is, and what should be fixed first — in plain language rather than technical noise.

Why do I need security services?