Penetration Testing Questionnaire

Penetration Testing

Scoping Questionnaire for Penetration Test

Note:

All information shared with us is treated with strict confidentiality, not disclosed to any third parties, and is securely deleted upon the conclusion of the contractual engagement with the client to ensure data privacy.

Penetration Testing Information

Please enable JavaScript in your browser to complete this form.

Name

First

Last

Email Address

Phone Number

Company Name

Sector

What is the primary objective of the penetration testing?

Ex. To validate the security posture and meet ISO 27001 compliance.

What type of penetration testing are you looking for?

Ex. External or Internal or Both

What level of testing is required?

Black-Box or Grey-box or White Box

How many IP addresses, servers, or applications should be included within the testing scope?

Ex. 20 IP addresses, 2 web applications, and 3 backend APIs.

What is the technology stack used in the systems being tested?

Ex. Linux servers, MySQL database, and Node.js applications.

Are there specific days or times that would minimize disruption during the testing process?

Testing should be scheduled between 9 PM and 6 AM to minimize impact.

Have all relevant stakeholders, including business owners, been informed and approved the penetration testing?

You need to get all the approvals to start the PT service.

Who will be the primary technical point of contact during the testing process (name, email, and phone)?

Ex. Contact [ Ali ] (IT Manager) ali@example.com or +966 500000000

of testing and

Will you require training or consultation based on the findings?

Is a follow-up retest required after remediating vulnerabilities, and what is the timeline?

Ex. Yes, retesting will be conducted within 30 days after remediation is completed.