{"version":1,"pages":[{"id":"KTNSkkBQOoGHo9b93G8M","title":"Anatomy of a Spearbit Review","pathname":"/","siteSpaceId":"sitesp_NoZHE","emoji":"1f531","description":"In the spirit of transparency, we will be dissecting the anatomy of a Spearbit review from beginning to end in order to assist in the standardization of a codified process for web3 security reviews.","breadcrumbs":[{"label":"Spearbook"}]},{"id":"yFe2crXYCYyYe3CSiQV0","title":"Form Submission","pathname":"/spearbook/anatomy-of-a-spearbit-review/form-submission","siteSpaceId":"sitesp_NoZHE","emoji":"1f4c4","description":"This is the starting point through which all Spearbit engagements begin when a client submits a request for review.","breadcrumbs":[{"label":"Spearbook"},{"label":"Anatomy of a Spearbit Review","emoji":"1f531"}]},{"id":"BTwa7bwDeUzvd1Vd0rAQ","title":"Scoping and Information Gathering","pathname":"/spearbook/anatomy-of-a-spearbit-review/scoping-and-information-gathering","siteSpaceId":"sitesp_NoZHE","emoji":"1f50d","description":"The scoping process is a crucial step in which our researchers will analyze a variety of factors to determine the timeline and resources needed to complete a security review.","breadcrumbs":[{"label":"Spearbook"},{"label":"Anatomy of a Spearbit Review","emoji":"1f531"}]},{"id":"jrFKcAsiM79Oe4eFC2Au","title":"Communication Channels and Access","pathname":"/spearbook/anatomy-of-a-spearbit-review/communication-channels-and-access","siteSpaceId":"sitesp_NoZHE","emoji":"1f5e3","description":"This stage serves to establish the cadence, mediums, and expectations around communication as well as access to your code repository so that the Spearbit team can begin the scoping process.","breadcrumbs":[{"label":"Spearbook"},{"label":"Anatomy of a Spearbit Review","emoji":"1f531"}]},{"id":"YwgLzsL6VlSAsajD6pMu","title":"SOW & Rates","pathname":"/spearbook/anatomy-of-a-spearbit-review/sow-and-rates","siteSpaceId":"sitesp_NoZHE","emoji":"1f468-1f3eb","description":"The SOW elucidates the key terms of the agreement upon which both the client and Spearbit have dictated in regards to the coordination of the engagement as well as it's scope.","breadcrumbs":[{"label":"Spearbook"},{"label":"Anatomy of a Spearbit Review","emoji":"1f531"}]},{"id":"Ry5tsRRpafkEhuOMftFV","title":"Kickoff","pathname":"/spearbook/anatomy-of-a-spearbit-review/kickoff","siteSpaceId":"sitesp_NoZHE","emoji":"1f305","description":"The kickoff will initiate the beginning of the security review period and will confirm the scope and reiterate the scope and any other relevant items as confirmed in the SOW for alignment.","breadcrumbs":[{"label":"Spearbook"},{"label":"Anatomy of a Spearbit Review","emoji":"1f531"}]},{"id":"ItAllczclZrVxBwDjdUR","title":"Security Review Period","pathname":"/spearbook/anatomy-of-a-spearbit-review/security-review-period","siteSpaceId":"sitesp_NoZHE","emoji":"1f306","description":"The security review period as determined by the SOW comprises the bulk of the engagement process","breadcrumbs":[{"label":"Spearbook"},{"label":"Anatomy of a Spearbit Review","emoji":"1f531"}]},{"id":"V8yKIQAzXkJYb9wJTTwE","title":"Close-out Call and Walkthrough","pathname":"/spearbook/anatomy-of-a-spearbit-review/close-out-call-and-walkthrough","siteSpaceId":"sitesp_NoZHE","emoji":"1f303","description":"This phase serves to walkthrough the findings and answer any additional questions the client may have.","breadcrumbs":[{"label":"Spearbook"},{"label":"Anatomy of a Spearbit Review","emoji":"1f531"}]},{"id":"GaEMBM9nn8ArvWa2peem","title":"Fix Period","pathname":"/spearbook/anatomy-of-a-spearbit-review/fix-period","siteSpaceId":"sitesp_NoZHE","emoji":"1f6e0","description":"This section outlines the process and recommendations for implementing fixes, reviewing them, and the specific methodology for labeling issues during this phase","breadcrumbs":[{"label":"Spearbook"},{"label":"Anatomy of a Spearbit Review","emoji":"1f531"}]},{"id":"6FahiuRx0OlVY9ZYbMZO","title":"Final Report Delivery","pathname":"/spearbook/anatomy-of-a-spearbit-review/final-report-delivery","siteSpaceId":"sitesp_NoZHE","emoji":"1f381","description":"The receipt and confirmation of the final report after the fix-period signals the end of the engagement.","breadcrumbs":[{"label":"Spearbook"},{"label":"Anatomy of a Spearbit Review","emoji":"1f531"}]}]}