Scope agreed, test run, report delivered, fee settled.
Penetration testing firms and security consultancies run scoped engagements, often for a company in another country with a deadline to meet. Send the deposit before testing starts and the balance when the report is delivered, as one link each. Clients pay from their own wallet, and stablecoins settle to a wallet you control.
Before you read on: we publish every business type we take and every one we refuse — 28 we take, 11 we refuse.
Check yours in ten secondsA fixed scope, a close deadline, and a report the client may argue with.
A deposit before testing starts
You set aside testers for the engagement, so work starts only once the client is committed.
Send the deposit as one link, with your engagement or invoice number as the description.
The client is abroad and the deadline is close
A company in another country needs the test done by a date its own customer has set, and waiting on an international transfer eats into the time left.
Send the link. They pay from their own wallet, or by card where available — buyer eligibility depends on country, payment method, provider, and compliance checks.
"Your report found nothing"
A clean result, or a finding the client disagrees with, turns into an argument about the balance.
The scope you both signed decides what the fee covers. Send the balance link when the report is delivered, with the same engagement number.
Engagement fees settle to a wallet only you control.
Two limits worth knowing. If your own account with us is under review, automatic payouts pause until that is resolved. And a buyer paying by card can be declined, or asked to prove who they are, before the money is sent — a payment that doesn't happen, never money taken back from you afterwards.
A deposit link, then a balance link.
Agree the scope in writing
What is tested, the dates and the fee.
Send the deposit, then the balance
One link before testing, one when the report is delivered. The client pays from their own wallet, or by card where available — buyer eligibility depends on country, payment method, provider, and compliance checks.
The payment reaches your wallet
After the required network confirmations, in the currency the link was set in.
What a security consultancy asks first.
Can the client pay the whole fee before we start?
Yes, as one link for the full amount. Every link is a single payment of a fixed amount, and nothing is charged automatically.
What goes in the link description?
Your engagement or invoice number. Never details of the client's systems or of what you found.
The client disputes the findings and wants money back.
Your signed scope and your own terms decide what is owed. A payment taken this way is a full payment, so returning any of it is a payment you send back yourself. Zoyn has no refund button.
What does it cost me?
A percentage of each payment, agreed with you in writing before you go live: crypto payments start at 0.75%, and card payments, if your business can take them, have a separate, higher price. No monthly platform fee and no setup fee. Network fees, and any extra charge for how your customer pays, are separate. Your customer pays them on top of your price and sees their total before they pay.
Will you take my security consultancy?
We publish every business type we take and every one we refuse, and every application is reviewed before it goes live. We don't promise a timeline we can't keep.
Running IT for clients on a contract? Read the page for managed IT services. Fixing one-off support tickets? Read the page for IT support and helpdesk firms. Not sure we'd take your business? See exactly how we decide.
Send your next engagement as two links.
Apply today, and settle each payment to a wallet only you control after the required network confirmations. Every application is reviewed.
