Penetration Testing Scoping Questionnaire

Security Assessment Scoping Questionnaire

Complete the Form Below

Name(Required)

First Last

Company(Required)

Email(Required)

When would you like your test performed?(Required)

What type of assessment are you looking to perform?(Required)

Web Application Penetration Test

Web API Penetration Test

Mobile Application Penetration Test

External Network Vulnerability Scan

External Network Penetration Test

Phishing Testing & Training

PCI Scanning

Web Application Penetration Test

Are you looking to test more than one web application?

Yes

Web Application Name(Required)

Web Application URL

Web Application Purpose

If yes, how many?

Do you want testing done as an authenticated user of the system?(2 is recommended)(Required)

Yes

If Yes, how many user accounts?

How many pages/screens does the application have in total that require testing?(Required)

How many internal endpoints does the application have in total that require testing?(Required)

Web Application #1

Web Application Name(Required)

Web Application URL

Web Application Purpose

Do you want testing done as an authenticated user of the system?(2 is recommended)(Required)

Yes

How many pages/screens does the application have in total that require testing?(Required)

How many internal endpoints does the application have in total that require testing?(Required)

Web Application #1

Web Application Name(Required)

Web Application URL

Web Application Purpose

Do you want testing done as an authenticated user of the system?(2 is recommended)(Required)

Yes

How many pages/screens does the application have in total that require testing?(Required)

How many internal endpoints does the application have in total that require testing?(Required)

Web Application #1

Web Application Name(Required)

Web Application URL

Web Application Purpose

Do you want testing done as an authenticated user of the system?(2 is recommended)(Required)

Yes

How many pages/screens does the application have in total that require testing?(Required)

How many internal endpoints does the application have in total that require testing?(Required)

Web Application #1

Web Application Name(Required)

Web Application URL

Web Application Purpose

Do you want testing done as an authenticated user of the system?(2 is recommended)(Required)

Yes

How many pages/screens does the application have in total that require testing?(Required)

How many internal endpoints does the application have in total that require testing?(Required)

Web Application #2

Web Application Name(Required)

Web Application URL

Web Application Purpose

Do you want testing done as an authenticated user of the system?(2 is recommended)(Required)

Yes

How many pages/screens does the application have in total that require testing?(Required)

How many internal endpoints does the application have in total that require testing?(Required)

Web Application #2

Web Application Name(Required)

Web Application URL

Web Application Purpose

Do you want testing done as an authenticated user of the system?(2 is recommended)(Required)

Yes

How many pages/screens does the application have in total that require testing?(Required)

How many internal endpoints does the application have in total that require testing?(Required)

Web Application #2

Web Application Name(Required)

Web Application URL

Web Application Purpose

Do you want testing done as an authenticated user of the system?(2 is recommended)(Required)

Yes

How many pages/screens does the application have in total that require testing?(Required)

How many internal endpoints does the application have in total that require testing?(Required)

Web Application #2

Web Application Name(Required)

Web Application URL

Web Application Purpose

Do you want testing done as an authenticated user of the system?(2 is recommended)(Required)

Yes

How many pages/screens does the application have in total that require testing?(Required)

How many internal endpoints does the application have in total that require testing?(Required)

Web Application #3

Web Application Name(Required)

Web Application URL

Web Application Purpose

Do you want testing done as an authenticated user of the system?(2 is recommended)(Required)

Yes

How many pages/screens does the application have in total that require testing?(Required)

How many internal endpoints does the application have in total that require testing?(Required)

Web Application #3

Web Application Name(Required)

Web Application URL

Web Application Purpose

Do you want testing done as an authenticated user of the system?(2 is recommended)(Required)

Yes

How many pages/screens does the application have in total that require testing?(Required)

How many internal endpoints does the application have in total that require testing?(Required)

Web Application #3

Web Application Name(Required)

Web Application URL

Web Application Purpose

Do you want testing done as an authenticated user of the system?(2 is recommended)(Required)

Yes

How many pages/screens does the application have in total that require testing?(Required)

How many internal endpoints does the application have in total that require testing?(Required)

Web Application #4

Web Application Name(Required)

Web Application URL

Web Application Purpose

Do you want testing done as an authenticated user of the system?(2 is recommended)(Required)

Yes

How many pages/screens does the application have in total that require testing?(Required)

How many internal endpoints does the application have in total that require testing?(Required)

Web Application #4

Web Application Name(Required)

Web Application URL

Web Application Purpose

Do you want testing done as an authenticated user of the system?(2 is recommended)(Required)

Yes

How many pages/screens does the application have in total that require testing?(Required)

How many internal endpoints does the application have in total that require testing?(Required)

Web Application #5

Web Application Name(Required)

Web Application URL

Web Application Purpose

Do you want testing done as an authenticated user of the system?(2 is recommended)(Required)

Yes

How many pages/screens does the application have in total that require testing?(Required)

How many internal endpoints does the application have in total that require testing?(Required)

Please list any additional details here:

Web API Penetration Test

Are you looking to test more than one Web API?(Required)

Yes

If Yes, how many?

Web API Name(Required)

Web API Purpose

How many endpoints does the API have in total that require testing?(Required)

Do you want testing done as an authenticated user of the system (2 is recommended)?(Required)

Yes

If yes, how many API Keys would you like tested?

Do you have documentation of the API endpoints in a format such as OpenAPI, Swagger, or POSTMAN?

(This greatly reduces the hours necessary to complete the assessment)

Yes

Please upload the file below:

Max. file size: 7 MB.

Web API #1

Web API Name(Required)

Web API Purpose

How many endpoints does the API have in total that require testing?(Required)

Do you want testing done as an authenticated user of the system (2 is recommended)?(Required)

Yes

If yes, how many API Keys would you like tested?

Do you have documentation of the API endpoints in a format such as OpenAPI, Swagger, or POSTMAN?

(This greatly reduces the hours necessary to complete the assessment)

Yes

Please upload the file below:

Max. file size: 7 MB.

Web API #1

Web API Name(Required)

Web API Purpose

How many endpoints does the API have in total that require testing?(Required)

Do you want testing done as an authenticated user of the system (2 is recommended)?(Required)

Yes

If yes, how many API Keys would you like tested?

Do you have documentation of the API endpoints in a format such as OpenAPI, Swagger, or POSTMAN?

(This greatly reduces the hours necessary to complete the assessment)

Yes

Please upload the file below:

Max. file size: 7 MB.

Web API #1

Web API Name(Required)

Web API Purpose

How many endpoints does the API have in total that require testing?(Required)

Do you want testing done as an authenticated user of the system (2 is recommended)?(Required)

Yes

If yes, how many API Keys would you like tested?

Do you have documentation of the API endpoints in a format such as OpenAPI, Swagger, or POSTMAN?

(This greatly reduces the hours necessary to complete the assessment)

Yes

Please upload the file below:

Max. file size: 7 MB.

Web API #2

Web API Name(Required)

Web API Purpose

How many endpoints does the API have in total that require testing?(Required)

Do you want testing done as an authenticated user of the system (2 is recommended)?(Required)

Yes

If yes, how many API Keys would you like tested?

Do you have documentation of the API endpoints in a format such as OpenAPI, Swagger, or POSTMAN?

(This greatly reduces the hours necessary to complete the assessment)

Yes

Please upload the file below:

Max. file size: 7 MB.

Web API #2

Web API Name(Required)

Web API Purpose

How many endpoints does the API have in total that require testing?(Required)

Do you want testing done as an authenticated user of the system (2 is recommended)?(Required)

Yes

If yes, how many API Keys would you like tested?

Do you have documentation of the API endpoints in a format such as OpenAPI, Swagger, or POSTMAN?

(This greatly reduces the hours necessary to complete the assessment)

Yes

Please upload the file below:

Max. file size: 7 MB.

Web API #2

Web API Name(Required)

Web API Purpose

How many endpoints does the API have in total that require testing?(Required)

Do you want testing done as an authenticated user of the system (2 is recommended)?(Required)

Yes

If yes, how many API Keys would you like tested?

Do you have documentation of the API endpoints in a format such as OpenAPI, Swagger, or POSTMAN?

(This greatly reduces the hours necessary to complete the assessment)

Yes

Please upload the file below:

Max. file size: 7 MB.

Web API #3

Web API Name(Required)

Web API Purpose

How many endpoints does the API have in total that require testing?(Required)

Do you want testing done as an authenticated user of the system (2 is recommended)?(Required)

Yes

If yes, how many API Keys would you like tested?

Do you have documentation of the API endpoints in a format such as OpenAPI, Swagger, or POSTMAN?

(This greatly reduces the hours necessary to complete the assessment)

Yes

Please upload the file below:

Max. file size: 7 MB.

Web API #3

Web API Name(Required)

Web API Purpose

How many endpoints does the API have in total that require testing?(Required)

Do you want testing done as an authenticated user of the system (2 is recommended)?(Required)

Yes

If yes, how many API Keys would you like tested?

Do you have documentation of the API endpoints in a format such as OpenAPI, Swagger, or POSTMAN?

(This greatly reduces the hours necessary to complete the assessment)

Yes

Please upload the file below:

Max. file size: 7 MB.

Web API #4

If 4 or more, please share additional details for additional Web APIs with your account manager.

External Network Vulnerability Scan

How many Public IP addresses need to be scanned?(Required)

Are all addresses available to the internet?(Required)

Yes

If no, how will the IP addresses be accessed for assessment?(Required)

External Network Penetration Test

How many Public IP addresses need to be included in the penetration test?(Required)

Are all addresses available to the internet?(Required)

Yes

If no, how will the IP addresses be accessed for assessment?(Required)

Mobile Application Penetration Test

Would you like to test more than one mobile application?

Yes

If yes, how many?

Mobile Application Name(Required)

Mobile Application Purpose

Platform

IOS

Android

Both

How many API endpoints does the Mobile App have in total that require testing?(Required)

Mobile Application #1

Mobile Application Name(Required)

Mobile Application Purpose

Platform

IOS

Android

Both

How many API endpoints does the Mobile App have in total that require testing?(Required)

Mobile Application #1

Mobile Application Name(Required)

Mobile Application Purpose

Platform

IOS

Android

Both

How many API endpoints does the Mobile App have in total that require testing?(Required)

Mobile Application #2

Mobile Application Name(Required)

Mobile Application Purpose

Platform

IOS

Android

Both

How many API endpoints does the Mobile App have in total that require testing?(Required)

Mobile Application #2

Mobile Application Name(Required)

Mobile Application Purpose

Platform

IOS

Android

Both

How many API endpoints does the Mobile App have in total that require testing?(Required)

Mobile Application #3

Mobile Application Name(Required)

Mobile Application Purpose

Platform

IOS

Android

Both

How many API endpoints does the Mobile App have in total that require testing?(Required)

Phishing Testing and Training

How many users?(Required)

How many campaigns do you want to run in a year?(Required)

PCI Scanning

How many IP addresses need to be scanned?(Required)

Are all addresses available to the internet?(Required)

Yes

If no, how will the IP addresses be accessed for assessment?(Required)

Additional Comments and Information

Do you have any additional information you would like to share for the assessment(s)?

Security AssessmentScoping Questionnaire

Security Assessment Scoping Questionnaire

Web Application Penetration Test

Web Application #1

Web Application #1

Web Application #1

Web Application #1

Web Application #2

Web Application #2

Web Application #2

Web Application #2

Web Application #3

Web Application #3

Web Application #3

Web Application #4

Web Application #4

Web Application #5

Web API Penetration Test

Web API #1

Web API #1

Web API #1

Web API #2

Web API #2

Web API #2

Web API #3

Web API #3

Web API #4

External Network Vulnerability Scan

External Network Penetration Test

Mobile Application Penetration Test

Mobile Application #1

Mobile Application #1

Mobile Application #2

Mobile Application #2

Mobile Application #3

Phishing Testing and Training

PCI Scanning

Additional Comments and Information

COMPANY

SERVICES