Aevora

Web Application Penetration Test

Scoping - First Phase

The first phase of scoping focuses on gathering enough detail to propose a timeline and quote. It also captures general information about your environment and engagement to support further communication. The second phase covers more specific technical details, such as target lists, test credentials, and other environment-specific requirements. Once both phases are complete, we review all information, provide a summary of work, and proceed to kick-off the engagement.

This form is submitted securely over an encrypted HTTPS connection. Your privacy is important to us. We understand that you may not be ready to answer certain questions without further discussion, or you may not yet have all the necessary details. That’s completely understandable—please complete the required fields and answer the remaining questions as best you can or as you feel comfortable.

When would you like this test to be completed?
Does this engagement have a report deadline?
Are there other services that you would be interested in bundling into this engagement?
Are there any compliance requirements?
What is the estimated size of the web application?
Are the web application multi-tenant and require tenant-to-tenant testing?
Does the web application use APIs? If so, please specify how many different API endpoints are available.
How will Aevora be testing this web application?
Please check the boxes that apply to your application.
Please check the boxes that apply to your application.
Please specify backend languages used by the web application.
Please specify frontend technologies used by the web application.
Please specify the database behind your web application.
Please specify the WAF and defensive technology in use if applicable.
Disabling these technologies ensures that we are testing vulnerabilities at the application layer.
Please feel free to provide a brief overview of the application you'd like tested. While this is not required at this stage, any details you’re comfortable sharing (such as the app’s purpose and key features) will help us better prepare for next steps and tailor our conversations to your needs.