Scoping Checklist

Answer these questions to help providers give you accurate quotes. The more details you provide, the more precise the estimate.

💡 Pro Tip: You don't need to share sensitive details like IP addresses in your initial RFQ. Providers will discuss specifics after you connect.

Web Application Testing

How many web applications?Approximate number of pages/endpoints per app?User roles to test (guest, user, admin)?Any file upload or payment functionality?

Network / Infrastructure Testing

How many IP addresses (external/internal)?External only or internal network access?VPN access required?Any systems excluded from testing?

Cloud Security

Which cloud provider(s)? (AWS, Azure, GCP)Number of accounts/subscriptions?Configuration review or active testing?

Mobile App Testing

iOS, Android, or both?Native, hybrid, or React Native?Include backend API testing?

API Testing

Number of API endpoints?API documentation available (OpenAPI/Swagger)?REST, GraphQL, or SOAP?

General Information

Compliance requirements? (PCI-DSS, HIPAA, SOC2)Preferred testing window?Retest included in scope?Report format preferences?