Skip to content

Frequently asked questions

Common questions about working with Prismelo, security engagements and this website.

Published19 SECTIONS

Working with Prismelo

Do you work with early-stage companies?

Yes. We work with companies at different stages, including projects that are still being defined. What matters is that the problem is real and the decision-maker is involved.

Do you take on maintenance of an existing codebase?

Yes. We start with a short review to understand what exists, then agree the highest-value work. Rewrites are proposed only when maintaining the current system is genuinely riskier.

Who owns the work?

You do. Code, documentation and configuration are delivered in your repositories and assigned under the engagement agreement.

Security work

Do you need written authorization to test?

Yes — always. Testing does not begin until a signed scope and authorization document exists. See Assessment scope & authorization.

Can you test a site you do not own on someone's behalf?

Only with documented authorization from the system owner. We will ask for it, and decline the work if it cannot be provided.

Do you issue security certifications?

No. Certification is issued by accredited auditors. We can help prepare and close gaps, and we will be clear about where an external auditor is required.

Do you provide 24/7 monitoring?

No. We can design logging, alerting and incident procedures for the team or provider that operates them.

AI work

Can you guarantee a model will be accurate?

No. We measure accuracy on your workload, set thresholds, and design the product so uncertain outputs are visible. Any claim of guaranteed accuracy should be treated with suspicion.

Where does our data go when you build an AI feature?

That is agreed explicitly before implementation: which provider, which retention settings, and what is sent. Where required, we design around providers with suitable terms or keep processing on your own infrastructure.

This website

Is the community forum live?

No. The interface is complete, but no backend is connected. Content shown there is sample data and is labelled as such. The required integration contract is documented in Community integration.

Does the contact form work?

It validates and accepts submissions. Delivery requires a transactional email provider to be configured — until then the form reports that delivery is not configured and offers a mailto fallback, rather than showing a false success. See Contact form integration.

Are the blog articles real?

The articles under /resources are sample content published to demonstrate the format. They are labelled as sample articles and are not company announcements.

Commercial

How is pricing set?

Per engagement, after scoping. The scope document states what is included and what the work will cost before it begins.

Can we start small?

Yes, and we usually recommend it. A short advisory or a narrow first deliverable is the cheapest way to test whether a larger engagement makes sense.

Something unclear or out of date? Email hello@prismelo.tech with the article title.