Practical Web Penetration Testing

Penetration Test Agreement

This contract will list all the necessary information to allow you and the consultants that work for you to conduct and execute the penetration testing activities. The following shows a sample contract with these titles:

• The contract brief description
• Your main contacts and the main client contacts
• How confidential information is going to be exchanged
• Different penetration testing activities with details
• Limits of responsibility in case of something bad happening
• Finally, the signature of the contract

Web Application Penetration Test Agreement:

For [Client Company Name][Date]

Contents:

1. Description
2. Contacts
3. Exchange of confidential information
4. Web Application Intrusion Test
5. Code review
6. Infrastructure security ...