Free guide · Penetration testing

Pen Test Buyer's Guide and Scoping Worksheet

How to pick the right test, compare quotes fairly, and get a report your auditor will accept.

  • Which test types you actually need
  • A scoping worksheet you can send to any vendor
  • How to compare quotes fairly

Get the free guide

Free PDF. We'll email you a copy too.

What's inside

4 sections, built to be used, not just read

Choose the test types

External, internal, web app, API, cloud and more, and when each one matters.

Scoping worksheet

Seven fill-in fields any vendor needs to quote accurately.

Rules of engagement

The authorizations and limits to agree before testing starts.

Compare vendors on

Five things that separate a real pen test from a scan.

What drives the price

A quick reference table you can share with your team.

Your next 30 days

A short action plan so the guide turns into progress.

Who it's for

Built for

  • Companies with a SOC 2, PCI, HIPAA or CMMC requirement
  • Teams buying a pen test for the first time
  • Anyone comparing quotes that don't line up

Rather talk it through?

Send us your scoping worksheet and we'll return a fixed-price quote. Year-end pen tests book up fast, so earlier is better.

Book a 30-minute call