New insight: Building an actionable exposure program

Contact Cyberus

Tell us what you are planning, reviewing or responding to.

Contact details

Address
Ban Watnak, Sisattanak District, Vientiane 0103, Lao PDR
Hours
Monday–Friday, 9:00–17:00 (UTC+7)

Send an enquiry

Prepare the first conversation

  • Describe the problem, requirement, planned change or event that prompted the enquiry.
  • Name the type of system, service or team involved without including credentials or sensitive evidence.
  • Explain the decision or outcome you need from the work and who will use it.
  • Share useful timing constraints, known dependencies and whether authorization still needs to be confirmed.
  • Identify a contact who can clarify scope, ownership and business context.

Keep secrets and sensitive evidence out of this form

Do not submit passwords, private keys, access tokens, personal data, live vulnerability details or sensitive incident evidence in the initial enquiry. Give a high-level description instead. If further material is needed, agree an appropriate exchange method and handling boundary with Cyberus first.

What happens next

  1. The enquiry is reviewed

    Cyberus considers the question, the practice area it may involve and what information is still needed. Submitting the form does not authorize testing or investigation.

  2. The problem is discussed

    A follow-up conversation can clarify the environment, purpose, timing, constraints, stakeholders and available authorization.

  3. A scope can be shaped

    Where Cyberus can help, the proposed work, boundaries, responsibilities, inputs and deliverables can be documented for review before work begins.

  4. Sensitive exchange is agreed separately

    If evidence or access is required later, the parties first agree what is necessary and how it should be transferred and handled.

Before you send an enquiry

What scoping information is useful?

At a high level, explain what prompted the enquiry, the kind of environment involved, the decision you need to make, desired timing, known constraints and who owns or can authorize the systems. Do not include credentials or sensitive evidence in the form.

What should we do about an urgent incident?

Use the published contact details and state clearly that the enquiry concerns an active incident, with a non-sensitive summary and a safe way to reach you. Do not place credentials, personal data or live evidence in the form. Contact does not promise availability or a particular response time; continue following your organization’s own incident and emergency procedures.

What happens after we enquire?

Cyberus reviews the message and may request a conversation to understand scope, authority, constraints and the outcome you need. If the work is suitable, a proposed boundary and approach can be prepared for review. No testing or investigation begins from the form submission alone.