Code and commit
A link to the repository and the exact commit or tag to audit.
Hylox Security / Process
How an audit works
From your first message to a final report you can publish.
Step 1
Scope and quote
Share your code, documentation and deadline. We agree the scope, timeline and price.
Step 2
Review
Our auditors review the code by hand, supported by automated analysis and testing.
Step 3
Draft report
You receive every finding with its severity, impact and how to fix it.
Step 4
Fix and re-check
Your team fixes the issues. We check each fix and look for new problems.
Step 5
Final report
You get a final report showing the status of every finding, ready to publish.
How to prepare
Send these with your request so the audit goes faster and finds more.
Documentation
A specification or README that says what the code should do.
Tests
Your test suite and how to run it.
Deployment details
Networks, upgrade plans and who holds admin keys.
A technical contact
One developer who can answer questions during the review.
Your deadline
Your launch date, so we can plan around it.
Timing and price
What affects timing
Code size, complexity, external integrations, and how quickly fixes come back for the re-check.
Getting a quote
Send your repository and documentation. We reply with the scope, timeline and price.
Good to know. An audit greatly reduces risk but cannot guarantee code is free of vulnerabilities. Findings apply to the code version reviewed. Legal opinions are prepared and signed by qualified lawyers.
Ready to start?
Send your code and deadline. We reply with a scope and quote.