Credentials
Keys and Passwords Stay Out of Email
Test accounts, API tokens, and VPN profiles are exchanged after the rules of engagement are signed, through the channel agreed for that engagement — never in an enquiry, never in a calendar invite.
Contact · 176 Linden Street
Every Harbor Lantern engagement begins with a scoping call held by appointment. The engineer who will lead your test conducts it, reads whatever you send beforehand, and returns a fixed-fee proposal within two business days of hanging up.
The Directory
The practice keeps a short list of channels so that nothing is lost between them. Use the one suited to your purpose; each is read by the people who run the engagements.
To arrange a scoping call, or — for clients already under engagement — to reach the designated test lead during an agreed testing window.
For the particulars of your environment, procurement paperwork — W-9, vendor security questionnaires, MSA redlines — and links to prior reports shared through an encrypted service.
176 linden street, brooklyn, NY 11221
For signed agreements and posted correspondence. Meetings at the practice are arranged in advance; the door is not staffed for callers without one.
By appointment — book a call
Calls are scheduled around your engineering leads’ calendars, not ours. Propose a time in the form below and we will confirm it in writing.
Propose a time →Send the Particulars
Written from info@theharborlantern.com, confirming a call time and naming the engineer who will take it.
Should you want a mutual NDA in place before sharing architecture, send yours or request ours; it is countersigned before the call.
Forty minutes on scope, fragile systems, testing windows, and who answers if something breaks.
Delivered within two business days, with the fee stated once. It does not move after testing begins.
Windows, source IPs, rate limits, and a stop word — countersigned before a single packet is sent.
Visiting the Practice
Most engagements are conducted remotely from first call to retest. Where a debrief is better held across a table — or a board wants to meet the people behind the report — we receive clients at the practice in Brooklyn.
| Address | 176 linden street, brooklyn, NY 11221 |
|---|---|
| Hours | By appointment — book a call |
| Telephone | (718) 221-8018 |
| info@theharborlantern.com |
Bring a laptop only if you intend to walk us through something live; the debrief documents are prepared on paper.
Chart the route to No. 176 →Sensitive Material
A security practice ought to be particular about its own inbox. These are the conventions we ask clients to observe from the first message onward.
Credentials
Test accounts, API tokens, and VPN profiles are exchanged after the rules of engagement are signed, through the channel agreed for that engagement — never in an enquiry, never in a calendar invite.
Prior reports
We read any previous penetration test report before quoting. Send it as a link from your own encrypted file service, or ask and we will issue a secure upload request addressed to you alone.
Authorization
We do not scan, probe, or test anything until written authorization is countersigned by a person with authority over the assets in scope. Sending us a domain is not permission to test it.
Paperwork
W-9 requests, vendor security questionnaires, insurance certificates, and MSA redlines may be sent to info@theharborlantern.com and are returned by the practice, not a reseller.
Before Your Next Questionnaire Arrives
Engagements from $2,350 for a retest to $39,800 for a full year of Harbor Watch, each fixed in writing after a forty-minute call.