For software vendors

Answer with evidence, not another spreadsheet

Every larger customer sends their own security questionnaire. You answer the same questions for the twentieth time while the deal stalls. An evidence profile answers for you.

01

What an evidence profile gives you

  • 01

    An answer that can be verified

    Not a claim, but evidence with a source and a date. The buyer sees where it comes from and doesn't have to take your word for it.

  • 02

    One link instead of twenty spreadsheets

    You send the profile URL. The buyer sees the scope, the date and what was checked.

  • 03

    Right of reply

    If someone assesses your product, you see the findings and can add your own statement. We publish it alongside the finding, not instead of it.

  • 04

    Scope and date instead of an empty badge

    There is no badge without a date, a scope and a link to its limitations. A badge that doesn't say what it covers is misleading and protects you from nothing.

02

What we won't do

This is the part that decides whether the profile is worth anything to a buyer.

We don't sell a better result

Payment covers carrying out the assessment, never its outcome. There is no price for removing a finding or for a higher position in a ranking.

We won't remove a finding on request

You can report an error and we will check it at the source. If we were right, the finding stays, together with your statement.

We won't write that the product is secure

We will write what we checked, when, and what we did not check. A buyer who knows the difference trusts that more than an assurance.

We won't publish anything without your knowledge

The profile is private by default. You choose which fields are public and when.

03

How it works

  1. We agree the scope: which product, which version, which environment.
  2. We collect evidence from your documents and from what is publicly visible.
  3. We check what we are authorized to check, within the agreed scope.
  4. You get a list of what is worth fixing before anything becomes public.
  5. After the fix we run a retest and add it to the profile.
  6. You choose which fields are public and get a URL to send to customers.

Sales don't have to stall on questionnaires

Tell us what product you sell and what customers ask about most. We will reply with what can be shown with evidence.