PENTEST.RED / SCOPE

Prepare your pentest scope

Build a short testing brief before speaking with a provider. Get questions and expected evidence without registration. This is a planning aid, not a security assessment or a price estimate.

What needs testing?Web applicationAPIMobile applicationInfrastructure / ADCloudAI / RAG / agent

Available accessExternal scope without accountsTest accounts with different rolesDocumentation and configuration access

Why test now?Before release or a major changeCustomer / procurement requirementsVerify fixesPeriodic risk assessment

Your draft brief

Select at least one asset type.

Do not include passwords, tokens or personal data. Selections stay in your browser until you contact us; downloads are created locally.

Planning references: OWASP WSTG and NIST SP 800-115. This checklist supports scoping and does not certify compliance.

OWASP WSTG ↗ · NIST SP 800-115 ↗