FAQ
Frequently asked questions
The questions AAVETech is asked most often, answered directly. The most common one is whether hiring a hacker is legal: it is, provided the systems involved are yours or you hold the owner's written permission. Every engagement starts with a signed authorisation, and that document is what keeps a legitimate engagement outside the criminal framework of the Information Technology Act, 2000.
Key takeaways
- Hiring a hacker is legal when the systems are yours or you hold written permission.
- Every engagement begins with a signed authorisation and rules-of-engagement document.
- Fixed-scope pricing, and a retest after remediation included on assessment work.
- Assessment engagements usually start within five to ten working days of a signed scope.
General
Do you only work with large companies?
No. A meaningful share of our work is for individuals and small businesses who cannot buy a six-week consulting engagement. The difference is scope and price, not whether we will take the work.
How quickly can you start?
Most assessment engagements begin within five to ten working days of a signed scope. For an active incident, retainer clients are engaged within four hours and non-retainer clients within twelve.
What do you need from us to start?
A named technical contact, a list of systems in scope, a test window, and written confirmation that you are authorised to test what you are asking us to test.
Is it legal to hire a hacker?
Yes — as long as the systems involved are yours or you have the owner's written permission. Unauthorised access is a criminal offence under Section 43 of the Information Technology Act, 2000. We require a signed authorisation before any testing, which is what keeps a legitimate engagement lawful.
Can you recover an account that has been hacked?
Often, yes, provided you can evidence that the account is yours. We work back to the root account first, because every other recovery runs through it, and we rebuild the recovery chain afterwards so it does not happen again.
Can you remove a deepfake of me?
Usually yes, and fastest where the platform has a clear impersonation or non-consensual content policy. We file with evidence, and where the content is also defamatory we tell you which legal route is the stronger one.
Do you guarantee that a penetration test will find every vulnerability?
No, and no honest firm does. A test is a point-in-time assessment against a defined scope. What we do guarantee is the scope, the method, the retest, and a clear statement of what was and was not tested.
Will testing take my site down?
The methodology is non-destructive by default and the test window is agreed in writing. Destructive checks are excluded unless you explicitly request them as part of the signed scope.
Do you use AI?
For coverage and triage — running broad automated checks quickly so a human can spend their time on judgement. Every finding that reaches you has been reviewed by an analyst, and the report is signed off by a named person.
Can you sign an NDA before we talk?
Yes. Our mutual NDA and rules-of-engagement templates are ready to sign, and we can have them countersigned the same day, including out of hours for an incident.
Do you work outside Kerala?
Yes. Most work is delivered remotely, and we cover every Indian state. On-site visits are scheduled where the engagement needs physical access or a formal kickoff.
What if you find something serious and it is too late to fix quickly?
We tell you immediately, out of band, with enough detail to act. The written report follows. A finding that is being actively exploited does not wait for the report.
Still have a question?
Send it to %s or call %s. If your question is not answered here, that is a gap in this page, and we will fix it.
Last reviewed: 24 October 2026. Information on this page is general guidance, not legal advice. Prices are indicative bands for a typical scope and are confirmed in a written quote before any work begins.