Clear scope · Non-disruptive · No permission means no testing

Rules of Engagement

SAB Security only works with written permission. No assessment begins without written authorization and a clearly defined scope.

Core principle

No permission means no testing. SAB Security is designed for practical, documented and non-disruptive security reviews for small businesses.

✓ Public website review

✓ Basic security configuration checks

✓ Exposed login/admin surface review

✓ Public information disclosure checks

✓ Basic API surface observations

✓ Security header review

✓ HTTPS and redirect checks

✓ Outdated technology indicators

✓ WordPress security observations

✓ Email security review (DMARC/SPF/DKIM)

✕ Testing without written permission

✕ Out-of-scope testing

✕ Denial-of-service testing

✕ Social engineering

✕ Credential theft

✕ Private data download or modification

✕ Payment bypass

✕ Employee targeting

✕ Destructive action

✕ Phishing or spam