For agencies
Deliver the app. And the evidence.
Bring a clear audit record to every client handoff: what ran, what failed and what to fix.

GET/the-handoff-workflow200
One project per client app.
Keep each client’s inputs, consent records and scan history together.
- 01
Record the authorization.
Get the client’s permission, verify the domain, and authorize the source and backend inputs. Each scan stores the consent and scope.
- 02
Audit the prepared app.
Use two dedicated test accounts and synthetic rows. Pair source checks with database metadata and a live scan for clearer coverage.
- 03
Hand over a useful report.
Export the redacted PDF, explain the proven findings and untested areas, and give the client the repair prompts. Re-run after fixes.
Hand over a branded report.
Builder adds white-label PDFs and read-only client portals for each project, with your name, logo and colour. Branding never changes findings, coverage or disclaimers, and there is no certificate of security.
Start your first client audit.
Create a workspace, add the client app and record the authorization.