Pentest guides for buyers

How to use these pentest guides

Start with why you were asked for a test. For example, a SOC 2 auditor and a PCI assessor expect different scopes. Then read the approach and planning guides. Finally, read the report guides before you compare quotes.

Every guide uses the facts we publish. So prices match our packages, and timelines match how we work.

Compliance pentest guides

Tests driven by an auditor or assessor. Each has a different scope.

• SOC 2 penetration testing
• PCI penetration testing
• Annual penetration testing
• FedRAMP penetration testing
• GDPR penetration testing
• Cyber Essentials Plus and pentests

Approaches and models

How much the tester knows, and how the work is bought. So pick before you scope.

• Black box penetration testing
• Grey box penetration testing
• White box penetration testing
• Manual penetration testing
• Automated penetration testing
• Penetration testing as a service
• Vulnerability scanning vs penetration testing
• Double blind penetration testing
• Independent penetration testing

Pentest guides for planning and results

Before and after the test. Also what to share.

• Penetration test plan
• Penetration testing for small business
• Penetration testing report
• Reading penetration test results
• Penetration test attestation letter