Customer Security Review Sprint
Get the questionnaire off your desk.
A customer questionnaire is taking your team away from product work. Get proposed answers and evidence references for one questionnaire and one product, ready for your approval.
- Price
- From €1,600 · excluding VAT
- Delivery
- Approximately three working days after scope, owners, required inputs and evidence access are confirmed
Start with a short description. We confirm fit and scope before work begins.
What you get
- Proposed answer matrix with evidence references.
- Evidence index and claim map where useful.
- Qualifications, unsupported claims and open items with named owners.
- Cover note for the customer or internal approver.
Scope and limits
One questionnaire. One product. Your team approves and submits the answers.
Do not send passwords, private keys, API keys, recovery codes, session tokens or other secrets.
Who it is for
B2B teams with a customer security questionnaire, a deadline and limited technical time.
Company background
WitnessOps was founded by Karol Stefanski, previously an engineer at Waystone and Nostra. Professional background on LinkedIn →
Your part in the engagement
What do you need from me?
Name the questionnaire, product and deadline first. After scope and handling are agreed, provide the questionnaire, existing evidence and an owner who can resolve open questions.
What access is required?
We work from the agreed documents and evidence. No production credentials are needed through this form. We confirm any evidence access before work begins.
What happens after delivery?
You receive proposed answers, evidence references and open items. Your team checks, approves and submits the final response; acceptance by the customer is not guaranteed.
How the engagement works
1. Fit check
Confirm the questionnaire, product scope, deadline, owners and handling constraints without sending secrets.
2. Scope agreement
Confirm authority, inputs, price, timing, exclusions and evidence handling.
3. Review
Map supplied material to questions, draft supportable answers and separate assertions, gaps and unknowns.
4. Approval package
Return the package for the customer’s review and final submission.
Full scope and exclusions
After a non-secret fit check. One questionnaire. One product scope.
- The customer owns the final answers, approvals and submission.
- WitnessOps does not certify compliance or guarantee that a customer, auditor or procurement team will accept the package.
- WitnessOps does not invent evidence or turn an unsupported claim into a supported one.
- Formal certifications and reports remain necessary where the reviewer requires them.
Example and technical details
SYNTHETIC DEMONSTRATION, NOT CUSTOMER EVIDENCE
Example cover note
This fictional response covers one example product and the evidence references listed below. Open items require the named owner before the response is sent.
Example evidence references
- Architecture standard: current approved version
- Access review procedure: product scope
- Incident response policy: owner-confirmed
| Question area | Status | Reference / limitation |
|---|---|---|
| Encryption in transit | Supported | Architecture standard, section 4 |
| Annual penetration test | Open | Current report not supplied in this demonstration |
| Regional data residency | Supported with qualification | Product scope and hosting region must match |
Start with a short description. We confirm fit and scope before work begins.