Guides for the people buying the test
Scoping, enterprise security reviews and agency client projects, written plainly. No forms, no gates.
- How to scope a web application and API penetration testWhat to inventory before you ask for a quote, what actually drives testing effort, how to choose an environment and test accounts, and what a written scope record should say before anyone signs an authorisation.
- Security testing in agency client projectsWhen to propose penetration testing in a statement of work, who signs the testing authorisation, which contract questions to settle, how to handle environments and data, and how to schedule testing, reporting and retest around a client launch.
- What enterprise reviewers expect from a pentest reportThe questions enterprise security reviewers and questionnaires typically ask about your penetration test, how SOC 2 and ISO 27001 auditors use testing evidence, and the signs that a report is a reformatted scan.
Get a fixed quote for your release.
A short form about the product and the deadline. We reply with scoping questions, then a fixed written quote.