Payment does not buy an outcome
The client pays for research and reporting. Only a positive expert decision can lead to certification.
Trust and independence
Careful with the judgement. Restrained with the information.
An enterprise assessment touches sensitive architecture, access, vulnerabilities and decisions. Minimal disclosure, clear roles and verifiable reporting are therefore part of the service.
01
Independence
No OutSystems approval
Vulneras is performed independently by Evergreen IT and is not issued or endorsed by OutSystems.
02
Confidentiality
Assessment information remains private
Scopes, scores, evidence, findings and reports are never returned through public verification.
Minimum access
Evidence is processed only for the agreed assessment and shared with involved assessors.
03
Personal data
Purpose-bound processing
Contact details are used only for the request, report access and the transparently permitted follow-up.
Limited retention
Sample report download records are deleted after no more than 180 days.
04
Responsible disclosure
Report vulnerabilities directly
Do not share sensitive details through web forms. Use the security address below for coordinated disclosure.
Responsible disclosure