Penetration Testing

Details and scope

Test a business application and its API under an agreed written authorisation. Authorised test plan, manual findings with evidence, remediation priorities and retest report. Agreed coverage completed; reproducible findings documented; 1 retest within 30 days of report. The stated scope is agreed before work starts; additional work is quoted separately.

Specifications

• 1 web application; up to 3 roles and 30 API endpoints; 8 tester-days including report and 1 retest
• 64 specialist-hours including preparation, delivery, checks and handover
• Authorised test plan, manual findings with evidence, remediation priorities and retest report
• Acceptance: Agreed coverage completed; reproducible findings documented; 1 retest within 30 days of report
• Excludes: Denial-of-service testing, social engineering, source-code audit and certification