SurfaceGuarda Nuvtek service
NLEN
Request an assessment

Legal

Authorisation form

We examine nothing without your written permission. With this form you record which assets we may examine, when and under which conditions.

Request an assessment

SurfaceGuard · a Nuvtek service

Authorisation for an external attack surface assessment

1. Client

Organisation
Company registration no.
Address
Contact person
Job title
Email and phone
Emergency contact (24/7)

2. Scope

The following domains, subdomains and IP addresses or ranges may be examined:

Explicitly excluded from examination:

3. Package and period

Package☐ Assessment   ☐ Monthly monitoring   ☐ Custom
Start date
End date (if applicable)
Permitted times

4. What is and isn't done

  1. Nuvtek maps publicly visible assets and assesses them with non-destructive checks, such as DNS lookups, certificate checks, identifying open ports and reading publicly visible software versions and settings.
  2. Nuvtek does not carry out exploitation, brute-force attacks, denial of service, social engineering or other destructive tests.
  3. Nuvtek does not attempt to log in and does not use any credentials it finds.
  4. If Nuvtek finds assets outside scope, they are reported and not examined further.

5. Client declaration

  1. I am authorised to give this permission on behalf of the organisation named above.
  2. The organisation owns the assets in scope, or has written permission from the owner, including any hosting or cloud providers.
  3. I give Nuvtek permission to examine the assets in scope as described in this form, within the stated period.
  4. I agree to the SurfaceGuard terms and conditions.

On behalf of the client

Name
Date
Signature

On behalf of Nuvtek

Name
Date
Signature

Send the signed form to klantenservice@nuvtek.nl.