Question 1

Who is TheSecureLancer?

Accepted Answer

TheSecureLancer is an independent cybersecurity consultancy operated by Tanveer Singh (alias 0xDTC), focusing on offensive security, penetration testing, and website protection for businesses of all sizes.

Question 2

How do you work (solo, remote) and what industries do you serve?

Accepted Answer

Work is done primarily solo with direct access to the practitioner. 100% remote-capable; on-site available for physical assessments. Clients span SaaS, e-commerce, fintech, healthcare, agencies, and startups.

Question 3

How do I verify credentials, and do you sign an NDA?

Accepted Answer

A redacted sample report is available on request and client references can be arranged. A mutual NDA is standard on all engagements. Nothing is disclosed without explicit written consent.

Question 4

What's the difference between a vulnerability assessment and a penetration test?

Accepted Answer

A vulnerability assessment identifies and classifies weaknesses. A penetration test goes further by exploiting vulnerabilities in a controlled way to demonstrate real-world impact, following: scoping, reconnaissance, exploitation, post-exploitation, and reporting.

Question 5

What web vulnerabilities do you test for, and do you test live systems?

Accepted Answer

Testing covers the full OWASP Top 10 and beyond, including SQL injection, XSS, IDOR, broken authentication, business logic flaws, and API security issues. Production testing is supported with agreed windows to ensure zero unplanned disruption.

Question 6

Can you help if my website has already been hacked?

Accepted Answer

Yes. Malware removal and incident response covers triage, containment, full malware scan and removal, backdoor elimination, database sanitisation, Google/blacklist removal, and post-cleanup hardening. Urgent cases can begin quickly.

Question 7

What is a red team operation?

Accepted Answer

A red team engagement is an advanced adversary simulation testing your ability to detect and respond to a real attack. Unlike a pentest, the blue team is not informed. Techniques span digital, physical, and social engineering vectors.

Question 8

Do you offer Cloudflare, WordPress security, cloud assessments, and compliance work?

Accepted Answer

Yes. Cloudflare setup includes WAF, DDoS protection, bot management, and SSL hardening. WordPress hardening covers admin lockdown and plugin audits. Cloud assessments cover AWS, Azure, and GCP. Compliance audits align to ISO 27001, SOC 2, PCI DSS, GDPR, and NIST CSF.

Question 9

What's the first step, and how long does a typical engagement take?

Accepted Answer

A scoping call is scheduled after you submit the contact form. Timelines: web app pentest 3-7 days plus reporting; infrastructure 1-3 weeks; red team several weeks. Malware removal and Cloudflare setup typically complete within 24-72 hours.

Question 10

What do I receive at the end, and is re-testing included?

Accepted Answer

All engagements include a detailed written report with findings, CVSS risk ratings, evidence, remediation steps, an executive summary, and a live debrief call. A free retest of critical and high-severity findings is included in penetration testing engagements.

Question 11

How is sensitive data handled, and what if a critical issue is found mid-engagement?

Accepted Answer

Sensitive data encountered is never exfiltrated, stored, or shared beyond what is necessary for the report. Critical findings are reported immediately out-of-band so your team can begin remediation right away.

Question 12

Can I see a sample report before hiring?

Accepted Answer

Yes. A redacted sample report can be shared after a basic NDA is signed, giving you a clear picture of report quality, structure, and depth before committing to an engagement.

Question 13

How much does it cost, and do you offer retainer contracts?

Accepted Answer

Pricing is scope-based with a full breakdown and no hidden fees. Monthly retainers are available for ongoing monitoring, maintenance, and priority incident response.

Question 14

How quickly can you start, and do you offer emergency response?

Accepted Answer

Standard lead time is 1-2 weeks from signed agreement to test start. Emergency response for active breaches, ransomware, and hacked websites can often be accommodated within 24-48 hours.

Question 15

How do I get started?

Accepted Answer

Fill out the engagement request form. It takes about 2 minutes. Describe your environment, what you need, and your preferred timeline. A scoping call will be scheduled and a tailored proposal sent. No commitment required until you sign the engagement agreement.

Frequently Asked Questions

About

Services & Scope

Process

Pricing

Frequently Asked Questions

About

1Who is TheSecureLancer?

2How do you work (solo, remote) and what industries do you serve?

3How do I verify credentials, and do you sign an NDA?

Services & Scope

1What's the difference between a vulnerability assessment and a penetration test?

2What web vulnerabilities do you test for, and do you test live systems?

3Can you help if my website has already been hacked?

4What is a red team operation?

5Do you offer Cloudflare, WordPress security, cloud assessments, and compliance work?

Process

1What's the first step, and how long does a typical engagement take?

2What do I receive at the end, and is re-testing included?

3How is sensitive data handled, and what if a critical issue is found mid-engagement?

4Can I see a sample report before hiring?

Pricing

1How much does it cost, and do you offer retainer contracts?

2How quickly can you start, and do you offer emergency response?

3How do I get started?