Request a security review

Fill this in once. You get a request ID, payment instructions and a private update channel right away. After the fee is confirmed on Base and your authorization proof is published, the review starts automatically and the report is delivered to your private channel.

Do not put passwords, API keys or other secrets in this form. Credentials for authenticated testing (Standard/Deep) are arranged separately after the automated phase.

Pay by card (Stripe): Quick $149 · Standard $449 · Deep $999. Submit this request first and pay after we confirm scope by email, or pay now to reserve. Website fixes: $99 fix · $25/mo upkeep.

Tier

Organization

Your full name (authorized signer)

Your role

Contact (optional)

Updates and the report go to the private channel shown after you submit. This is only kept with the request record.

In-scope hostnames, one per line

Public hostnames you own or are authorized to test. No IP addresses, no shared platform domains.

In-scope endpoints, one per line (optional)

https URLs on the hostnames above. Each is requested once with an unauthenticated GET.

Public GitHub repository (optional)

Read only. Code is never executed.

Environment I authorize light, non-destructive checks against production.

Testing window (optional)

Out of scope (optional)

I own the systems listed above or have written permission from their owner to authorize this testing, and I am authorized to sign for the organization named above.

I accept the testing authorization terms: the fee is paid upfront; testing is non-destructive and limited to the listed scope; if the scope is not mine to authorize, is re-pointed at systems I do not own, or is used to attack GhOsT77, the job is closed and the fee is retained.

Signature: type your full name exactly as above