Guides for the people buying the test
Scoping, enterprise security reviews and agency client projects, written plainly. No forms, no gates.
- How to scope a web application and API penetration testWhat to inventory before you ask for a quote, what actually drives testing effort, how to choose an environment and test accounts, and what a written scope record should say before anyone signs an authorisation.
- Security testing in agency client projectsWhen to propose penetration testing in a statement of work, who signs the testing authorisation, which contract questions to settle, how to handle environments and data, and how to schedule testing, reporting and retest around a client launch.
- What enterprise reviewers expect from a pentest reportThe questions enterprise security reviewers and questionnaires typically ask about your penetration test, how SOC 2 and ISO 27001 auditors use testing evidence, and the signs that a report is a reformatted scan.
Get a fixed price for your test.
Tell us about your app and who asked for the test. We reply with a fixed price.