The two reports of an audit
Tarumá Pagos is a made-up company. Its findings are not: we found every one of these flaw types with this same system in real audits.
10 findings
- 1 critical
- 1 high
- 4 medium
- 2 low
- 2 informational
Web, API, smart contract, mobile app, network and server

Technical report
Every finding in full: the proof, the impact, how to fix it and why we ruled out a false positive.
Download PDF21 pages · 116 KB
PDF SHA-256 fingerprint
2deab5cf7ba90e928553ff0409b425b9d52ce977c717305b6c5ab124722cca01
Executive summary
What is at stake, what it could cost and what the law says in each country. No technical jargon.
Download PDF12 pages · 83 KB
PDF SHA-256 fingerprint
3ef197c4f1e20ca1435cae36db9efaf9ccd22e178e9a5d955aeac8707c9ab759
An audit delivers these two reports. Here they download with no sign-up because Tarumá is an example.
Inside the report, every finding carries the SHA-256 fingerprint of its evidence: you check it when you hire us and we hand over the files.
The free analysis of your domain
It reads public data only, without touching your systems. This is Tarumá’s.
On screen, right away
What anyone can see of your domain, and how many more findings there are.


Everything, with its fix
Every finding with how to fix it, nothing hidden.
- Findings and fixes20 pages · 117 KB
- Leadership brief14 pages · 87 KB
Tarumá is made up; its findings come from real analyses. The prices in the next steps are your region’s.
Want one for your company?
Tell us what you want to protect and we will tell you which audit fits and what it costs.