- AUTHORITY BEFORE EXECUTION
- Origin
- Israeli security. Global service.
Security testing,
with proof at every step.
One customer workspace for identity, payment, ownership, authorization, assessment and a signed report.
- 01Verified identity
- 02Proven ownership
- 03Signed authorization
Authorized path
- 01Identity
- 02Payment
- 03Ownership
- 04Authorization
- 05Assessment
No browser flag can unlock a run.
01HOW IT WORKS
Each gate waits for a server receipt.
The engine opens a gate only after it has recorded proof. A click in the browser never advances one.
- 01.1
Identity
Verified identity, sealed evidence and provider deletion proof.
- 01.2
Payment
Airwallex settlement confirmed by the engine.
- 01.3
Ownership
DNS TXT proof from two independent resolvers.
- 01.4
Authorization
Signed letter matches the immutable scope.
- 01.5
Assessment
A worker grant exists only inside the approved window.
02CUSTODY
Separate receipts, sealed evidence.
Each proof is recorded on its own, by the server, before a run can be scheduled.
Recorded by the engine
- Identity requires sealed evidence and provider deletion confirmation.
- Payment, ownership and authorization remain separate receipts.
- Every run grant binds the exact scope and expires.
Never decided in the browser
- A click in the browser never advances a gate.
- The browser cannot set an approval receipt.
- The browser waits for the cleared receipt. Returning from checkout never marks payment as done.
- No browser flag can unlock a run.
03ASSESSMENT LEVELS
Depth follows the agreed package.
Every package passes the same five gates before any test runs.
04CONTROLS
Controls for the account owner.
The engine will revalidate scope, receipts and the time window before issuing a worker-only run grant.
- 04.1CONTROL
Stop assessment
The kill switch stops remaining work at once and records an audit entry.
- 04.2DEVELOPER ACCESS
Developer tokens
Each token is scoped to one engagement, expires, and can be revoked at once.
- 04.3SIGNED REPORT
Owner delivery
The signed report is offered to the account owner as an encrypted archive. A plaintext copy needs a code sent by email.
05DEVELOPER CONTRACT
One Cybersive API.
The workspace uses one same-origin API. This page lists the routes the site calls and marks plainly which answer today.
- 05.1
GET /healthzAnswers when the API is up.Live - 05.2
GET /v1/catalogLists assessment engines and the minimum package for each.Live
Routes marked live answer today. Every other route is one the site calls; it is not available yet.
Read the developer contract06SECURE WORKSPACE
Control your assessment.
Sign in by email, then complete each gate in order. The workspace shows only what the engine has recorded.