Enterprise procurement
Straightforward to evaluate and buy
GoldAgent is built to be easy for a procurement, security or legal team to assess. The documents and process below are available on request, and we will work to your onboarding requirements.
What's available
The evaluation pack
Mutual NDA
Signed before any sensitive detail is shared.
Scoping questionnaire
To define systems, sites and depth precisely.
Testing authorisation & rules of engagement
Naming targets, window, source and exclusions, with hosted-PBX right-party consent.
Statement of work
Deliverables, timing, liability and fees in writing.
Data-handling notes
What we collect, how it is protected, and retention.
Sample report
See the deliverable before you commit.
Security-questionnaire support
We will complete your vendor security questionnaire.
Retest & assurance terms
How verification and recurring reassessment are handled.
The process
From first contact to signed engagement
- 1
Enquiry & NDA
Initial conversation under a mutual NDA where needed.
- 2
Scope & authorise
Agree the scope and the written authorisation to test.
- 3
Proposal & SoW
A statement of work with deliverables, timing and fees.
- 4
Assess, report, retest
Deliver the assessment, report and verification of fixes.
For regulated buyers
Where compliance is in play
- Telephony that handles card payments can fall within PCI DSS scope
- Independent assessment supports Cyber Essentials and insurance renewals
- Evidence and retest status suit audit and board reporting
- Data-handling is documented for your information-governance review
A note on legal review
Our engagement agreement, authorisation pack and data-handling terms are provided for your review. They are commercial documents, not legal advice, and both parties should review them before signature. We are glad to work with your legal team.
Request the procurement pack
Tell us who is evaluating and what you need. We will send the relevant documents and answer your security questionnaire.
Testing is only performed against systems you own or are explicitly authorised to test.