Skip to content
Payments for cybersecurity consultancies

Scope agreed, test run, report delivered, fee settled.

Penetration testing firms and security consultancies run scoped engagements, often for a company in another country with a deadline to meet. Send the deposit before testing starts and the balance when the report is delivered, as one link each. Clients pay from their own wallet, and stablecoins settle to a wallet you control.

Before you read on: we publish every business type we take and every one we refuse — 28 we take, 11 we refuse.

Check yours in ten seconds
Why this is harder than it looks

A fixed scope, a close deadline, and a report the client may argue with.

A deposit before testing starts

You set aside testers for the engagement, so work starts only once the client is committed.

Send the deposit as one link, with your engagement or invoice number as the description.

The client is abroad and the deadline is close

A company in another country needs the test done by a date its own customer has set, and waiting on an international transfer eats into the time left.

Send the link. They pay from their own wallet, or by card where available — buyer eligibility depends on country, payment method, provider, and compliance checks.

"Your report found nothing"

A clean result, or a finding the client disagrees with, turns into an argument about the balance.

The scope you both signed decides what the fee covers. Send the balance link when the report is delivered, with the same engagement number.

Engagement fees settle to a wallet only you control.

Two limits worth knowing. If your own account with us is under review, automatic payouts pause until that is resolved. And a buyer paying by card can be declined, or asked to prove who they are, before the money is sent — a payment that doesn't happen, never money taken back from you afterwards.

How it works

A deposit link, then a balance link.

1

Agree the scope in writing

What is tested, the dates and the fee.

2

Send the deposit, then the balance

One link before testing, one when the report is delivered. The client pays from their own wallet, or by card where available — buyer eligibility depends on country, payment method, provider, and compliance checks.

3

The payment reaches your wallet

After the required network confirmations, in the currency the link was set in.

Common questions

What a security consultancy asks first.

Can the client pay the whole fee before we start?

Yes, as one link for the full amount. Every link is a single payment of a fixed amount, and nothing is charged automatically.

What goes in the link description?

Your engagement or invoice number. Never details of the client's systems or of what you found.

The client disputes the findings and wants money back.

Your signed scope and your own terms decide what is owed. A payment taken this way is a full payment, so returning any of it is a payment you send back yourself. Zoyn has no refund button.

What does it cost me?

A percentage of each payment, agreed with you in writing before you go live: crypto payments start at 0.75%, and card payments, if your business can take them, have a separate, higher price. No monthly platform fee and no setup fee. Network fees, and any extra charge for how your customer pays, are separate. Your customer pays them on top of your price and sees their total before they pay.

Will you take my security consultancy?

We publish every business type we take and every one we refuse, and every application is reviewed before it goes live. We don't promise a timeline we can't keep.

Running IT for clients on a contract? Read the page for managed IT services. Fixing one-off support tickets? Read the page for IT support and helpdesk firms. Not sure we'd take your business? See exactly how we decide.

Send your next engagement as two links.

Apply today, and settle each payment to a wallet only you control after the required network confirmations. Every application is reviewed.

Zoyn

Get paid in digital dollars, straight to a wallet you control.

Company

Legal

Legal & regulatory disclosures

Zoyn is software. It is not a bank, a payment processor, a payment gateway, a money transmitter or a money services business. Zoyn is never the seller in a sale (the "merchant of record"). Zoyn never holds a shop's money, and does not decide how long a payment company may hold it. When a customer pays by card or bank, the payment company handles that payment under its own terms and may hold it for a short time. The money then goes to the shop's own payment contract once the payment network has confirmed it.

Businesses can be based in 64 jurisdictions. A US state stays open when at least one checkout partner still serves buyers there. Customers can pay from 130+ countries through the checkout providers we connect to; which countries customers can pay from is set by those providers, not by Zoyn, and may change without notice. Not available in sanctioned jurisdictions: Cuba, Iran, North Korea, Sudan, Syria, and the Crimea, Donetsk, and Luhansk regions of Ukraine.

© 2026 Zoyn. All rights reserved.