can you sign an nda?
yes, and we'll sign yours rather than insisting on ours. for security work we sign a scope and rules-of-engagement document as well, which protects both sides.
an NDA is normal paperwork and we treat it that way. send yours, we read it, and unless it contains something unusual we sign it as is. we'd rather work under your document than spend a week arguing about ours. if you don't have one and want one, say so and we'll sort it out. if you want it signed before the first call, that's fine too.
security work needs one more document
an NDA covers what we learn. it doesn't authorise us to attack anything. for a pentest or a security review we also sign a scope and rules-of-engagement document: which systems are in scope, the testing window, what's off limits, and who to call if something looks wrong mid-test. it protects you, because we only touch what's on that page, and it protects us, because testing without written authorisation isn't legal. hosting providers sometimes require their own sign-off, and we handle that too.
everything we handle for you sits under your contract, NDA, and signed scope, and the report is yours.