Third Party Memorandum

A Third Party Memorandum (TPM) allows a client to provide third parties with limited access to the design and results of research conducted by WhiteHats. These documents are provided exclusively to our clients. It is possible to verify the authenticity of a third-party statement at WhiteHats. At a minimum, our third-party statements explain the testing period, scope and number of hours allocated. In addition, different levels of detail are available:

Detail level 0

We express no opinion on the security or details of the findings.

Detail level 1

We give our opinion on security at the time of project closure.

Detail level 1+

We provide our assessment of security at the time of project closure plus our estimate of the (solution) priority for each test point.

Detail level 2

We provide our opinion on security at the initial examination and at the time of project closure.

Detail level 2+

We provide our assessment of security at initial examination and at project closure plus our estimate of the (solution) priority for each test point.