SERVICES

Defensive support, with clear boundaries.

TACIB focuses on scoped security reviews, practical hardening, responsible public-source research, and education. Every request is assessed before any work is accepted.

AVAILABLE BY SCOPE REVIEW

What we can discuss.

Services are not automatically accepted. Scope, authorization, capability, timing, and a clear deliverable must be agreed before work begins.

SCOPED ENGAGEMENT

01. Website security & exposure review

A limited review of an owned or explicitly authorized website to identify common security and configuration concerns.

  • Publicly visible configuration and exposure checks
  • Common web security control review within agreed scope
  • Prioritized findings with remediation guidance

Active scanning or exploitation is never performed without explicit written permission and agreed boundaries.

WRITTEN AUTHORIZATION REQUIRED

02. Vulnerability assessment & penetration testing

Structured testing can be considered for a clearly identified target where the requester has authority to approve testing.

  • Written scope, test window, exclusions, and contact plan
  • Non-destructive testing by default
  • Report format agreed before work starts

Suitability is reviewed case by case. Do not assume TACIB accepts every target type or level of complexity.

PRACTICAL GUIDANCE

03. Website, email & account hardening

Help prioritizing foundational security measures for small organizations, student projects, and individual digital accounts.

  • MFA, account recovery settings, and access hygiene
  • Website update, backup, HTTPS, and security-header checklist
  • Email authentication concepts such as SPF, DKIM, and DMARC

This is scoped guidance, not a promise of continuous monitoring or a guaranteed secure state.

LAWFUL PUBLIC SOURCES ONLY

04. Public-information exposure review

Reviewing public-facing organizational information to help understand accidental exposure and reduce avoidable risk.

  • Defined organization, domain, or brand scope
  • Public sources and documented methodology
  • Privacy-aware findings and risk-reduction suggestions

No doxxing, stalking, private-account access, credential misuse, or personal targeting.

LEARNING & AWARENESS

05. Cybersecurity awareness & workshops

Introductory sessions and practical learning materials for learners, families, and small teams.

  • Phishing and scam recognition
  • Password managers, MFA, and privacy habits
  • Ethical security learning in legal labs

Dates, audience, depth, and any fee must be agreed in advance; a public workshop is not always available.

GUIDANCE, NOT INVESTIGATION

06. Digital safety navigation

General guidance to help people understand immediate account-safety steps and find appropriate platform or official reporting channels.

  • Account security and evidence-preservation checklists
  • Links to relevant official reporting resources
  • Practical safety planning and referral guidance

TACIB does not promise account recovery, content removal, criminal investigation, legal representation, or emergency response.

Not currently advertised as ready-to-deliver services: 24/7 SOC or managed monitoring, incident-response retainers, forensic investigations, malware cleanup, emergency content takedowns, and guaranteed account recovery. These require specialist capacity, tooling, safe intake, and/or trusted partnerships.
THE PROCESS

No work starts without scope.

Before accepting a technical security request, TACIB should confirm:

  • Who owns the system and who has authority to approve work.
  • Which domains, IP addresses, apps, accounts, and test methods are in scope.
  • Testing window, exclusions, stop conditions, and emergency contact.
  • Data-handling expectations, report recipients, and retention/deletion approach.
  • Deliverables, limitations, fee (if any), and written approval.
Start a scope discussion ↗
WHAT WE WON'T DO

Safety isn't optional.

Unauthorized access or testingNo scanning or exploitation of systems without permission.
Credential theft or account intrusionNo password capture, bypass, or private-account access.
Harassment or doxxingNo exposure of private individuals for intimidation or retaliation.
Guaranteed rescue outcomesNo false promise of account recovery, takedowns, or crime investigation.