Frequently Asked Questions

Nyorsoft provides external cybersecurity reviews focused on public-facing websites, exposed assets, visible weaknesses, and data exposure indicators.

Not for our standard packages. Our core services are designed for public-facing reviews and do not require internal system access.

No. Our standard services focus on public-facing scope only. If you need authenticated testing or a deeper application assessment, that can be scoped separately.

Usually just your website URL, confirmation that you are authorized to request the service, and agreement on scope.

Timing depends on scope and complexity. Delivery timelines are confirmed during quoting or project acceptance.

Depending on the selected package, you may receive a written report, risk observations, remediation recommendations, and answers to follow-up questions by email.

Yes. We can expand the scope to include additional domains, subdomains, or selected public-facing assets.

Yes. We work with business clients internationally, including clients in the United States.

Payments are non-refundable once we have started work, since each audit reserves dedicated time and project-specific effort. If you need to cancel before we begin, email info@nyorsoft.com and we'll sort it out.

Yes, but that requires a separately agreed scope and usually test accounts or authorized access.

Yes. Our deliverables are designed to help you understand what was identified, why it matters, and what should be fixed first.

Yes. Our services are specifically designed to be practical, accessible, and useful for small businesses that want a professional external review without complex onboarding.

It can cover one part of it. The FTC Safeguards Rule asks covered firms, such as tax preparers and mortgage brokers, to run vulnerability assessments at least every six months unless they use continuous monitoring. Our FTC Safeguards Rule External Assessment covers the internet-facing part twice a year and documents it. It does not cover internal systems or the annual penetration test, and it is not a certification of compliance.

We accept card (Visa, Mastercard, American Express), PayPal, Link and Revolut Pay — all processed securely by Stripe. Just click Pay Now on the package you want; no account is needed.

Yes — our fixed-price packages are paid upfront with the Pay Now button before we start. The custom-scope engagement is arranged individually after a short scoping exchange by email.

Yes. Unless otherwise agreed in writing, all prices and invoices are issued in USD.

No. Nyorsoft s.r.o. is not VAT-registered, so no VAT is added — the listed price is the final price. Any taxes that may apply in your own country are your responsibility.

Yes. As soon as your payment goes through, Stripe automatically emails you an invoice (PDF) with our company details (IČO 57593001, DIČ 2122846440). You'll also receive a certificate confirming the security audit was completed.

Yes. Payments are handled by Stripe, a PCI-DSS certified processor. We never see or store your card details.

You're redirected to a confirmation page and receive a receipt and invoice by email. We then review the website or domain you entered at checkout and send you the findings report and your audit certificate.