TigerNDR — Request a Scan

Full Name *

Title / Role *

Organization *

Work Email *

Use an organizational address that matches the assets below where possible.

Phone

Target Scope — domains and/or IP ranges *

List only assets you own or are authorized to test. Anything not listed is out of scope and won't be touched.

Authorization Basis *

I attest that the targets listed above are owned or operated by my organization, or that I hold written authorization from the owner to have them tested. I understand TigerNDR verifies this before any engagement begins.

Typed Signature *

I have read and agree to the Terms of Service & Rules of Engagement.

Anything else

No charge is made on submission. After your request is reviewed and authorized, you'll receive a secure payment link for the flat $499.99. Your information is used only to scope and deliver your engagement — never sold or shared.

What happens next

You submit this request. It reaches the Varya Red Team queue — nothing runs automatically.
We confirm scope with you and verify the targets are yours to test.
You pay the flat $499.99 via secure link and the signed rules of engagement are countersigned.
The operator authorizes the engagement. Only then does the team begin.
You get the findings report, then the included retest that confirms the fixes held.

Authorized work only. TigerNDR tests assets the requester owns or is authorized to test. We verify ownership before every engagement and decline anything we can't confirm. This is independent adversary emulation — not testing of third parties on request.

Terms of Service & Rules of Engagement

Authorization is required. You represent that you own, or are authorized by the owner to test, every asset in scope. TigerNDR verifies this before the engagement and may decline or refund if it cannot be confirmed.
Scope is binding. Only the assets you list are tested. Discovery does not expand scope; out-of-scope systems are not touched.
Non-destructive. No data is encrypted, deleted, or exfiltrated off your network; no denial-of-service. Impact is demonstrated, never caused.
Timing. Testing occurs within an agreed window. Either party may call a full stop at any time; only a human resumes it.
Confidentiality. Findings describe how to compromise your network, so they're handled as sensitive, delivered securely, and retained only as needed, then destroyed.
Independence & referrals. TigerNDR does not perform your remediation. Any referral relationship is disclosed; retests pass only on evidence.
Operator authorization. No engagement begins until TigerNDR's operator authorizes it after reviewing payment, attestation, and scope.