Aevora

External Network Penetration Test

Scoping - First Phase

The first phase of scoping focuses on gathering enough detail to propose a timeline and quote. It also captures general information about your environment and engagement to support further communication. The second phase covers more specific technical details, such as target lists, test credentials, and other environment-specific requirements. Once both phases are complete, we review all information, provide a summary of work, and proceed to kick-off the engagement.

This form is submitted securely over an encrypted HTTPS connection. Your privacy is important to us. We understand that you may not be ready to answer certain questions without further discussion, or you may not yet have all the necessary details. That’s completely understandable—please complete the required fields and answer the remaining questions as best you can or as you feel comfortable.

When would you like this test to be completed?
Does this engagement have a report deadline?
Are there other services that you would be interested in bundling into this engagement?
Are there any compliance requirements?
How many domains and subdomains are in scope?
How many external IP addresses are in scope?
How many web applications are in scope? Limited web testing will be performed.
If we perform password spraying, we will only attempt three passwords against each account. We can increase this number if you provide details on lockout policies (e.g., number of failed attempts before lockout, lockout duration). This is critical to avoid disrupting legitimate users.
If Aevora performs password spraying or credential stuffing with breached accounts and discovers valid credentials, would you like our operators to see if they can access the account? Post exploitation tasks such as sensitive data harvesting, lateral movement, or privilege escalation can be tested if in scope.
Will you whitelist testing IPs to avoid blocking or interference?
Please feel free to provide any other details that you would like to share.