Indicative pricing

A nonprofit may run paid activities where they support its purpose and resources are used for its non-profit objective, subject to accounting and tax validation.

No. They are indicative for a standard scope and confirmed in writing before work begins.

Public rates are indicative. The applicable VAT treatment and total amount are confirmed in the written proposal before work begins.

Because assets, access, constraints and deliverables can change the actual workload.

A scan automates detection. A pentest includes scoped manual analysis and written authorisation.

Only where explicitly stated. Otherwise it is quoted separately.

Yes. Services are designed for freelancers, nonprofits, startups and SMEs.

Yes, through the IBCSC Access Programme, subject to resources and written confirmation.

No. IBCSC can support preparation; certification belongs to competent independent bodies.

Yes, most scoping, review and advisory work can be remote.

Yes where needed; travel is agreed separately.

No unless expressly written.

Yes depending on availability and applicable urgent/emergency rates.

Limited access, minimal collection, suitable transfer channels and confidentiality.

Yes.

Small checks take a few business days; broader missions depend on scope and access.

Yes, with written confirmation where it affects price or timing.

Normally bank transfer under the written proposal or invoice.

It protects the client, third parties and IBCSC by proving the right to test the systems.

Yes, especially for unlawful, abusive, unauthorised or unsafe requests.