Legal Agreement For Pentesting 1jil

Penetration Testing Engagement Agreement

1. Summary of Penetration Testing Requirements: ____________________________________________________________________________ ____________________________________________________________________________ ____________________________________________________________________________ ____________________________________________________________________________ ____________________________________________________________________________ ____________________________________________________________________________ ____________________________________________________________________________ ____________________________________________________________________________

2. What Needs To Be Tested: Servers Workstations Routers Firewalls Networking Devices IOT Devices Cabling Databases Applications Employee Awareness Physical security

[] [] [] [] [] [] [] [] [] [] []

3. Rules of Engagement signed on: …Do you have any security-related policies and standards? ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ Do you want us to map your Internet presence? ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ……

Can you provide us with an architectural diagram, including addresses, host OS types, and software in use on the hosts? ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ … Can you provide us with the information on how many internet domains, hubs, routers, servers, workstations, IOT devices, any any other thing that needs to be tested you have in numbers. ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ … Can you provide a list of sites where we may have to travel to perform assessments on systems? ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ … Can you tell us which laws or regulations you needs us to be complied to during the test? ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ 4. Main clauses in the agreement: ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ _______________________________________________________ _______________________________________________________ _______________________________________________________ _______________________________________________________ _______________________________________________________ _______________________________________________________

5. Commercials Both Parties Agreed on: ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ _______________________________________________________ _______________________________________________________ _______________________________________________________ _______________________________________________________ _______________________________________________________ _______________________________________________________ 6. Other clauses in the agreement: ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ _______________________________________________________ _______________________________________________________ _______________________________________________________ _______________________________________________________ _______________________________________________________ _______________________________________________________ 7. Parties Involved: ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ _______________________________________________________ _______________________________________________________ _______________________________________________________ _______________________________________________________ One Way NDA [] Limited Liability of PenTester [] Date Signed ________________ Signature of PenTester

Signature of Other Party

________________

_________________