Say Hello

Penetration Testing Services

Powered by

a SOC 2-examined specialty group

Our certified engineers will provide a quality experience as we move you down the compliance and security path. To kickstart the process, please share helpful information that will help us to understand your requirements, and a specialist will reach out to schedule a scoping discussion. We look forward to serving you.

Please fill out the Pen Test Scoping Document below.

Company Information

What is the legal name of your company?

Email

What is the name, title, and address of the person to whom the quote should be addressed?

Billing Contact (if not existing Partner/Client)

Key Test Info

Is this test for general security or to fulfill PCI, ISO 27001, SOC 2, HITRUST or other regulatory compliances? Please list

How soon do you need to have the test completed?

How many public-facing or external IP addresses are to be tested? (Active-only IPs may be sufficient depending upon requirements.)

If you are wanting us to test internally (behind the firewall) How many active internal IPs or devices will be tested? Note: Ranges are not always helpful in determining time and effort. Active # of IPs is preferred.

Web Application Scope (If Applicable)

List in-scope web application URLs: How Many web applications to test?

Approximate number of pages in each application?

Are we testing any custom APIs which you are responsible for?

Yes

No

Authentication Roles to be tested? (User/Admin, Other)

Are any of the following being used (Please select all that apply)

Web application Firewall (WAF)

Load balancer

Content delivery Network (CDN)

None of the above

(If Applicable)

For the above internal/external and/or application/URL testing, are you interested in our continuous pen testing hybrid service?

Yes

No

If so, please indicate full scope of above or partial “spot check”

Mobile Applications

Are we testing mobile apps you have developed?

No

Yes, iOS

Yes, Android

Yes, iOS and Android

Wireless Network Testing

WiFi testing will be done remotely by shipping a specialized box

If testing WiFi, Number of physical sites you would like tested?

Number of unique SSIDs?

Social Engineering

Would you like Phishing emails to be sent (landing pages can be designed as well) and if so, to how many personnel?

Would you like to include a Phishing call campaign and if so, to how many personnel?

Would you also like Smishing or SMS Text phishing campaigns and if so, how many personnel?

Would you like a quote on the WebcheckAwareTM Set-it-and-forget-it phishing and training system?

Locations

Where are the in-scope system located: · Data center · Corporate office · Remote office · Colo, etc.

Are the in-scope systems hosted in your facility or with a third party? If externally hosted, please list the provider(s). This includes cloud providers such as CoLo facility AWS and Azure.

Final comments or special instructions:

Thanks for submitting! We'll contact you shortly.

After Submitting your answers, please schedule a scoping meeting here.