Discuss an engagement
Menu

Practical resource / Scoping questions

Scoping questions

The questions a consultant asks on a scoping call, one set per test. Answering them first makes the call shorter and the quote more accurate.

Penetration testing

  • Web applications and services
    The questions asked when scoping a web application or API penetration test, and why each one matters. Answer them online or in a fillable PDF.
  • Mobile applications
    The questions asked when scoping a mobile application penetration test, and why each one matters. Answer them online or in a fillable PDF.
  • Desktop applications
    The questions asked when scoping a desktop application penetration test, and why each one matters. Answer them online or in a fillable PDF.
  • External infrastructure
    The questions asked when scoping an external infrastructure penetration test, and why each one matters. Answer them online or in a fillable PDF.
  • Internal infrastructure
    The questions asked when scoping an internal infrastructure penetration test, and why each one matters. Answer them online or in a fillable PDF.
  • Wireless networks
    The questions asked when scoping a wireless network penetration test, and why each one matters. Answer them online or in a fillable PDF.
  • Restricted environments
    The questions asked when scoping a restricted environment breakout test, and why each one matters. Answer them online or in a fillable PDF.
  • Hardware and IoT
    The questions asked when scoping a hardware and IoT security test, and why each one matters. Answer them online or in a fillable PDF.
  • AI and LLM systems
    The questions asked when scoping an AI or LLM penetration test, and why each one matters. Answer them online or in a fillable PDF.

Adversary simulation