Authorize testing on behalf of your company.

Only someone with an email at the site's own domain can sign. We send a code to that address to confirm it's yours, keep a record of the signature, and send the report there when the review finishes.