30 minutes · video call or email · free
Bring us one scope. We'll show you what's in it.
You describe your surface, a Zaaf researcher walks you through what a Countermind would look at first, and you leave with a plan you can take or leave. If the honest answer is that you are in good shape, we say that.
Nothing runs before you say so
A call commits you to nothing. Testing starts only after a written scope that you sign: you name the assets, the hours, the request-rate cap and the accounts we may create.
- Before the call
- Nothing
- On the call
- A conversation
- After the call
- A summary by email
- Testing
- Only after a signed scope
Review desk
Four questions from the review desk
Request received
Thank you. Your request is in.
We have your request. A person from Zaaf confirms the time by email, usually the same working day, and the call link comes with that confirmation.
- 01We confirm the timeA person from Zaaf confirms by email, usually the same working day, and adds the call to your calendar.
- 02We read before we talkIf you named a domain, the researcher reads public information about it beforehand. Nothing is sent to it as a test.
- 03You decide what comes nextAfter the call you get a short summary. A written scope follows only if you ask for one.
What you get on the call
- 01
A researcher, not a sales script
The person on the call is a Zaaf security researcher who reads findings for a living.
- 02
A first look at your scope
We go through the surface you name and point at where a Countermind would start: roles, tenants, APIs, cloud trust or contracts.
- 03
A straight answer
If nothing in your scope needs us, we say so instead of padding a proposal.
- 04
A written next step
After the call you get a short summary by email. A written scope follows only if you ask for one.
If none of the times fit
Write to hello@zaaf.ai with two or three windows that work for you, in any time zone, and we will work around them.
hello@zaaf.aiSharing this with a colleague? The page lives at one address: zaaf.ai/book
Questions before the call
Is the call really free?
Yes. The call and the summary that follows cost nothing and commit you to nothing.
Will you test anything before the call?
No. At most the researcher reads public information about a domain you name. Nothing is sent to it as a test, and testing starts only after a written scope you sign.
Who will I talk to?
A Zaaf security researcher from the review desk, not a sales representative.
Can I bring a colleague?
Yes. Forward the confirmation email; the call link works for anyone you invite.
How is this different from booking a pentest?
A pentest is usually sold as a fixed block of hours. On this call we look at your scope first and only then suggest whether a Countermind fits, and how large it should be.