Security testing scope worksheet
Prepare an authorized testing conversation. Completing this worksheet does not authorize testing or establish a price.
Selections and notes stay in browser memory. A local text download is available in the interactive worksheet. No notes are sent to VioletX or added to a brief.
Describe the exposure or decision you need to understand
A business question helps distinguish application, API, cloud and other work.
List in-scope targets and explicit exclusions
Record environments, accounts, interfaces and third-party dependencies.
Identify authorization and safety contacts
Agree ownership, permitted methods, stopping conditions and escalation.
Discuss access, timing and operational constraints
Plan test accounts, test windows and availability requirements.
Agree reporting, remediation ownership and retesting
Decide how findings will become practical follow-through.