Secure design
The public enquiry flow avoids storing message content in a dedicated website database and asks users not to submit sensitive material.
Security
Security is part of the service design.
A concise public statement of secure defaults, reporting routes and proportionate assurance.
Request a scoping callWho this helps
Built around a buying situation.
- Clients and due-diligence teams
- Security researchers
- Website visitors
Useful when
The trigger is already visible.
- A buyer needs a concise security position
- A suspected vulnerability has been found
- A website change alters data or third-party risk
The position
Secure defaults with honest limits.
Pegasus applies data minimisation, controlled change and a dedicated disclosure route to the website. Public statements are deliberately proportionate: no website is represented as vulnerability-free, and detailed security information is shared only where authority and need are established.
01
A defined scope and accountable decision owners
02
Controls matched to the real operating context
03
Evidence that can be reviewed, tested and improved
Scope
What the work includes.
Every engagement is scoped around authority, operating context, available evidence and the decision that must be made.
Vulnerability handling
Dependencies, hosting behaviour and material changes are reviewed through the release process, with defects corrected before checkpointing where practicable.
Supplier and change assurance
Suspected vulnerabilities should follow the responsible-disclosure route so evidence, safety and communications can be controlled.
Questions answered
Before you scope the work.
Does this statement guarantee the website is secure?
No. It explains the current design approach and reporting route; it is not a guarantee of zero vulnerabilities or uninterrupted availability.
Where should a security issue be reported?
Use the responsible-disclosure page and send only the minimum non-destructive information needed for initial triage.
Start the conversation
Bring the exposure. Leave with a controlled route forward.
A first conversation is used to understand context, authority and the decision required—not to force a predetermined package.
Request a scoping call