Rohan Deshpande

I do authorised penetration testing. Asking about a specific vulnerability class sometimes gets refused, sometimes gets a full answer, with no obvious difference in phrasing. Stating the engagement context up front helps. What else reliably makes the difference?