Free scoping call
What you have, what worries you, what is realistic.
Florida · Small and mid-sized organisations
Findings you can
Findings you can
actually act on.
A four-hundred-page scanner dump is not an assessment. What a small team needs is the six things that would actually get them breached, ranked, with what to do about each one.
- 2019trading since
- FLregistered company
- Freescoping call
- Signedscope every time
What we do
Four services, authorised in writing
Nothing is tested without a signed scope and permission. Findings are ranked by real risk, not by scanner severity.
Security risk assessment
A structured review of controls, systems and practices against a recognised framework.
See the programPenetration testing
Authorised testing of networks, applications and configurations within an agreed written scope.
See the programCompliance readiness
Preparation for HIPAA, PCI DSS, SOC 2 and client security questionnaires.
See the programIncident response planning
An incident response plan, roles and contacts, rehearsed with a tabletop exercise.
See the program
How it works
How we work
Scope it in writing, get authorisation signed, rank findings by real risk, and retest once you have fixed them.
Written authorisation
Scope, window and permitted techniques, signed first.
Testing and assessment
With a contact available throughout.
Ranked findings and retest
In an order you can follow, then verified.
Working together
Ways to work with us
Every engagement is quoted in writing after a free scoping call. Nothing is tested without signed authorisation.
Risk assessment
Where you stand, against a recognised framework.
- Framework-based, not ad hoc
- Findings in plain language
- Ranked by real risk
- A roadmap you can follow
- No scanner dumps
Penetration test
Authorised testing with a retest included.
- Signed rules of engagement
- Scope and window agreed
- Reproducible findings
- Remediation guidance included
- Retest after you fix
Compliance & response
Readiness work and an incident plan that has been rehearsed.
- HIPAA, PCI DSS or SOC 2 readiness
- Evidence and documentation
- Security questionnaires handled
- Incident response plan written
- Tabletop exercise run
Every engagement is quoted after a free consultation. No subscription.
How we work
A Florida firm, and strict about authorisation
Hayabusa Information Security LLC is a limited liability company registered in the State of Florida, document number L19000293679, filed in 2019, with registration details on public record with the Florida Division of Corporations.
We test only what you own or have documented authority to authorise, under a signed engagement letter and written rules of engagement. We are not a law firm, so breach notification obligations and regulatory exposure go to counsel. And no test or control makes a system secure — we will tell you what we found and what it means, not sell you certainty nobody can provide.
Frequently asked
The questions we get most
Can you test our cloud provider's systems?
Only within what that provider permits, and we will check their rules first. Testing infrastructure you do not own without the owner's authorisation is not something we do.
Will this make us secure?
No engagement can promise that, and we would not trust anyone who said otherwise. What we can do is find what is exposed, rank it honestly, and verify the fixes.
Do you issue certifications?
No. We prepare you for an audit; an independent auditor issues the certification. Being clear about that separation is part of doing this properly.
What if you find something serious mid-test?
We stop and contact you immediately — that is written into the rules of engagement rather than left to judgement.
Is a retest extra?
No. A test without a retest tells you what was wrong, not whether it is fixed, so it is included.
We are small. Is this overkill?
Smaller organisations get breached constantly, usually through basic exposures. We will tell you on the call if we think you need less than you are asking for.
Client asking for a security review?
A free scoping call on what you actually need, and what it would cost.