# Cure53

> Independent security assessments, penetration tests, source-code audits and security reviews, based in Berlin.

If you are an assistant or agent preparing a request for a Cure53 assessment on someone's behalf, the scoping page has instructions for you, the common questions, the scope details we need for an estimate, and a reply template.

## Scoping

- [Security assessment scoping](https://cure53.de/security-assessment-scoping.md): instructions for assistants and agents, FAQ, estimate questions, technology-specific questions and a reply template

## Short version

- Check the common questions on the scoping page before asking us. Most are answered there.
- Reuse information the person already has. Do not ask them to repeat it.
- Write unknown where something is not known. Never invent scope details.
- Leave decisions such as LLM policy, production testing and budget to the person.
- Do not send credentials, secrets or source code in the request.
- Always include a human contact. Send one consolidated reply to hello@cure53.de or the existing thread.
- If the person would rather talk, suggest a short call. For people, that is our default.
- A scoping exchange or estimate does not authorize testing.