Fixed-scope technical work, delivered in days.

Fixed scope

• One existing business workflow across at most two external systems
• Up to eight automated steps with input validation and failure handling
• One runnable verification, a handoff guide, and one in-scope revision

Not included: data migration, hardware, regulated or high-impact automated decisions, new product development, ongoing hosting, or support.

Fixed scope

• One repository and one API surface
• Source, configuration, dependency, authentication, and authorization review
• Evidence-backed findings with severity and remediation, highest-value in-scope patches, and one verification pass

Review boundary: source and configuration analysis by default. Dynamic testing requires a separately signed scope with exact targets, dates, prohibited techniques, an emergency contact, revocation handling, written owner authorization, and hosting-provider policy confirmation. Denial of service, credential attacks, persistence, social engineering, and third-party targets are excluded. No review promises complete vulnerability discovery, compliance, or security.

Fixed scope

• One Discord or Telegram community
• Up to three commands, two alert sources, and one administrator role
• Privacy policy, deletion path, deployment instructions, and one verification pass

Default data posture: only configuration and platform identifiers are stored. Message content is not retained unless the signed scope requires it. Stored platform data is encrypted and deleted when no longer needed; test data and credentials are deleted after verified handoff. Ongoing hosting and operation are excluded. The buyer operates the bot and assumes continuing platform privacy duties after handoff. Signal automation is not offered.

Fixed scope

• One inbound workflow and one human handoff path
• Up to three message types, webhook verification, and one deployment target
• Privacy and deletion disclosures for the implemented data flow

Prerequisites: delivery time begins only after active Meta business assets, a WhatsApp Business Account and phone number, access token, and approved templates are supplied. Meta and template approval time, phone-number activation, and Meta messaging charges are outside the delivery window and price. Only the official WhatsApp Business Platform Cloud API is supported. Ongoing hosting and operation are excluded.