Quote per finding
For every finding the scope of the fix, the estimated effort and possible side effects are written separately. You decide which items to leave to us and which to solve with your own team.
DOKI / Cybersecurity
Cybersecurity · Remediation
We close the findings in your report for you or alongside your team. Each fix is quoted first, then applied with a change note and finally verified by a retest.
- Quote per finding
- Fix work plan
- Change notes
- Retest report
01 / What this service includes
From finding to verified closure.
Controlled rollout
Changes are tried in a test environment first and then released in a maintenance window. Every step has a change note and a rollback plan.
Closure by retest
A finding is closed not by the statement of whoever fixed it, but by the result of an independent retest. The result is recorded in a new version of the report.
02 / How it works
Before the fix, after the fix
How do the same four items look at the start and at the end of the work?
Before
- Legacy encryption protocols
- Missing security headers
- Outdated dependencies
- Over-broad permissions
After
- Legacy encryption protocols
- Missing security headers
- Outdated dependencies
- Over-broad permissions
03 / Scope
Let's define the scope together.
We clarify the scope, deliverables and acceptance criteria together in the first meeting. The written quote lists that scope item by item; if the scope changes, the quote is updated as a new version.
Only explicitly authorized assets and agreed scope are assessed.
Deliverables
- 01Quote per finding
- 02Fix work plan
- 03Change notes
- 04Retest report
04 / Process
How we move forward, step by step.
Each step ends with something concrete in your hands; we move on with your approval.
- 01
Analysis
We examine the current state with data and find the real source of the problem.
- 02
Quote
We prepare an itemised, versioned written quote based on the scope.
- 03
Fixing
We fix issues in order of importance and test every fix.
- 04
Retest
We retest fixed findings and confirm with evidence that they are closed.
05 / Decision details
What to know before you ask for a quote.
What is included, what we need from you, timing and payment, all in one place. The exact scope and price are set in the written quote.
Included
- Fixing issues in order of risk.
- A retest after the fix, to confirm the issue is really closed.
- A change note for every fix: what changed and why.
What we need from you
- Authorised access to the systems to fix (server, code or admin panel).
- Your go-ahead on when changes are made.
Timing and delivery
- Timing depends on the number and severity of issues and is stated in the quote.
What sets the price
- Priced per issue, by risk level.
- A volume discount when there are many issues.
Payment and aftercare
- For work agreed in person, the full fee is paid at the start.
- For remote work, half is paid at the start and half on delivery.
- We respond to every request within 12 hours.
- Meetings are held in Turkish; correspondence and deliverables are handled in the language of your choice with translation support.
- We work in person in Istanbul and remotely across Türkiye and worldwide.
06 / FAQ
The questions on your mind.
Tell us what you need; we will define the scope together.
Tell us about your projectCan our own team make the fixes?
Yes. If you wish, you take only the fix plan and the retest; your team does the implementation and we support them where they get stuck. A mixed model is also possible: some items stay with us, others with you.
Is permission needed before testing?
Yes. Only systems you are authorised for and have approved in writing are assessed.
Will testing affect my live system?
Scope, time window and methods are agreed in advance; risky steps require your separate approval.
Let's begin
Let's talk about your project.
Tell us what you need; we will define the scope together.