Guides

Whitehat · free build guide

Get paid to find security holes. With permission.

Turn Gemini 4 Argon into an authorized web-security practice. Offer a review, test only with a signed scope, and get paid to fix what you find.

Have an account? sign in and skip this.

Free · 21-page PDF · straight to your inbox

Web Security ReviewExample report

Scope · signed

bella-clinic.example

Booking & intake forms · client portal

Authorized by owner · in writing

Review log

  • scope signed · non-destructive only
  • 14 inputs · 3 roles mapped
  • OWASP A01–A10 checked
  • 47 candidates → 6 confirmed

Findings · ranked

  1. CriticalCVSS 9.1

    Booking records reachable without login

    Enforce access checks on every record

  2. HighCVSS 8.1

    Any logged-in user can open the admin panel

    Check the role on every admin route

  3. MediumCVSS 4.8

    Session cookie missing HttpOnly & Secure

    Set both flags; rotate on login

Retest6 of 6 cleared

Offer first. Test only with permission. Fix what you find.

  1. 1

    Offer first

    You describe the service before you look at anything. No site gets reviewed until its owner has signed.

  2. 2

    Test with permission

    A signed scope names the systems, the window and the methods. You test only what it names. Argon helps you validate, rank and fix.

  3. 3

    Fix, and get paid

    You hand over a report ranked by severity, with a fix for each finding, then confirm the fixes worked. That is what earns the referral.

Testing a site without the owner’s permission is an offence in most countries, however good your intentions. So the guide is built on one rule: the signature comes first.

The build guide

Everything you need to build the practice.

Twenty-one pages, from the first signed scope to the monthly retainer, with the four Argon prompts you reuse on every job.

  • 02Authorization: the law, and the signed scope that keeps you legal
  • 03The offer: what you sell, and who to sell it to
  • 04The practice lab where you get good without touching a stranger
  • 05The outreach email that offers a service, never a threat
  • 06The five-phase engagement, and where Argon helps
  • 07The report that gets you paid and referred
  • 09Prices, the legal setup, and the first 90 days
  • 10The scope template and the four Argon prompts

The opening

Argon was built for defenders. Work as one.

Google is giving Argon to trusted cyber defenders first. The clinic with a booking form will never hire one of them. It can hire you.

Your first signed review starts here.

It’s free. Tell me where to send it.

Have an account? sign in and skip this.

The 21-page playbook arrives attached · Built for Gemini 4 Argon