One-Page Authorisation — Free External Surface Review
Your written permission for a free, limited, non-intrusive look at the public surface of your hostname(s). Not a contract: no fees, no obligations on either side.
1. What you are authorising
1.1 Organisation legal name ("you") permits Provider legal name, trading as Verfend (Independent Security Operations), CNPJ or CPF, Recife, Pernambuco, Brazil ("Verfend") to carry out a free external surface review of:
| Hostname | Owner confirmation |
|---|---|
| hostname | ☐ Owned ☐ Authorised by owner |
| hostname | ☐ Owned ☐ Authorised by owner |
1.2 Before this page is signed, Verfend uses passive public information only: public DNS records, certificate-transparency logs, and the HTTP/TLS response of the named hostname(s) as any browser receives it. Nothing is accessed, scanned or tested.
1.3 After signature, Verfend may carry out a limited, non-intrusive external review of the named hostname(s) only: TLS configuration, HTTP response headers, and public DNS and e-mail authentication records, using only ordinary requests of the kind a browser makes — no port or service enumeration and no vulnerability scanning beyond such requests.
1.4 Review period: start date to end date. Verfend's source addresses: tester IPs.
2. What Verfend will not do
2.1 No authentication attempts, no credential testing, no exploitation of any weakness observed.
2.2 No denial-of-service, stress or high-volume traffic; requests are kept at ordinary browsing levels.
2.3 No access to anything behind a login, no changes to any system, no review of hostnames not listed above.
3. Terms
3.1 No cost, no obligation. You are not required to buy anything, and Verfend gains no right to test further. Any paid work needs a separate Service Agreement (Document 03) and a full Authorisation to Test (Document 04).
3.2 Factual sharing. Observations are shared with you only, in writing, factually and without exaggeration; Verfend does not publish or disclose them to anyone else.
3.3 Revocation. You may revoke this permission at any time by email to email; Verfend stops within 15 minutes of receipt.
3.4 Legal note. Unauthorised access to computer systems is a criminal offence (Brazil: Lei nº 12.737/2012, art. 154-A Código Penal; EU: Directive 2013/40/EU; applicable computer-misuse laws elsewhere). This signed page permits only the limited external review described in section 1, and nothing more.
4. Ownership confirmation and signature
4.1 I confirm the organisation owns or is authorised to permit review of the hostname(s) listed, and that I may sign on its behalf.
Name: ______________ Role: ________ Organisation: ________________ Date: ________
Verfend · Independent Security Operations · email · website · Document 04b v1.0 · date