Confidential Scoping

Scoping Information for
Penetration Testing

This questionnaire is designed to help us understand your organization's security testing requirements. By providing detailed information about your environment, we can accurately estimate the level of effort required for a comprehensive penetration test. Please complete all sections to ensure we deliver a proposal tailored to your specific needs.

Organization Information

Organization Name*

Contact Name*

Title

Email*

Phone

Regulatory Compliance Requirements

Please provide any regulatory compliance requirements that may impact the scope of testing (e.g., PCI DSS, HIPAA, SOX, GDPR).

Testing Scope

Please select the type(s) of penetration testing services required

Network Environment

External IP Addresses / Network Ranges in Scope

Hosting Providers / Data Center Locations

High-Level Network Diagram Available?

Please provide a high-level network diagram if available.

Network Notes

Operating Systems

Operating Systems in Scope

List the operating systems in scope and approximate number of hosts (e.g., Windows Server 2019/2022, Ubuntu 22.04, macOS).

Web Applications

In-Scope Web Application URLs

Do any applications process, store, or transmit sensitive data (e.g., PII, PHI, payment information)?

Testing Approach

Please select your preferred testing approach

Preferred Testing Window

Expected Deadline

The date by which testing results are needed (e.g., to meet an audit or customer requirement).

Security Controls and Previous Testing

Security Controls in Place

Previous Testing Performed

Previous assessments, including dates, provider, and results.

Deliverables and Additional Requirements

Required Deliverables

Additional Requirements or Notes

Scoping Information forPenetration Testing