Pen Test Questionnaire

tenants? for is

Name

First

Last

Email

What type of Penetration Test are you looking to conduct?

Web Application Test
External Network Test
Internal Network Test

Is there a date you need this completed by?

If you need the assessment to be completed by a certain date, please let us know. If it's a urgent request, we'll do our best to meet your expectations.

Do you have any compliance requirements?

Are there any specific compliance requirements or regulatory standards that the organization must adhere to (e.g., PCI-DSS, GDPR, HIPAA)?

Web Application Assessment Questionnaire

How many endpoints does the application handle?

If possible, please give a rough description of the functionality.

How many web pages does the application have?

If the application is a single page or dynamic page application, please list the components or dynamic page count.

Does the application have a login portal / authentication?

Does the application use role / permission-based authorization?

If yes, how many roles / permissions are enforced?

Does the application support multi-tenancy / separate tenants?

Does your application contain a functionally separate public/external API for customer use?

What URLs are in scope for the test?

External Network Assessment Questionnaire

What are the IP addresses and IP ranges in scope for testing?

What are the domains in scope for testing?

Where is your environment hosted?

On Prem
Cloud
Hybrid

What is the total number of users with access to your internal systems?

Is there any additional information you would like to provide or notify us about?

ie. We require this specific VLAN tested

Internal Network Assessment Questionnaire

What is the total number of users with access to your internal systems?

What is the total number of endpoints present within your internal network?

please include workstations and servers

What are the IP address ranges allocated for your internal network?

Where is your environment hosted?

On Prem
Cloud
Hybrid

Does your network utilize on-premises Active Directory and/or Entra ID?

Is a hybrid setup such as Entra Connect or Entra Cloud Sync utilized?

What methods do users utilize to connect to the network?

e.g., VPN, direct access, Wi-Fi

General Questions

Is there any other information you'd like to share?

e.g. past pen test scoping documents, SoWs

File Upload

Drag & Drop Files, Choose Files to Upload

Would you like to receive a sample report for the test requested?