Technology & Digital
Penetration Testing Agreement
Security assessment and penetration testing agreement with authorized scope, safe harbor clause, and confidentiality terms. Two signers (tester and client).
Document Preview
# Penetration Testing and Security Assessment Agreement **Effective Date:** ___________ This Penetration Testing and Security Assessment Agreement ("Agreement") is entered into by and between: **Security Tester:** ___________ ("Tester") **Client:** ___________ ("Client") ## 1. Purpose The Client engages the Tester to conduct authorized security testing of the Client's systems, networks, and/or applications to identify vulnerabilities, assess security posture, and provide actionable remediation recommendations. ## 2. Scope of Authorized Testing **Assessment Type:** ___________ **In-Scope Systems/Assets:** ___________ **Out-of-Scope Systems/Assets:** ___________ **IP Addresses/Domains in Scope:** ___________ **Testing Methodology:** ___________ ## 3. Testing Parameters **Testing Window:** ___________ to ___________ **Testing Hours:** ___________ **Notification of Testing:** ___________ **Exploitation Level:** ___________ **Social Engineering Permitted:** ___________ **Denial-of-Service Testing:** ___________
Fields (44)
effective date
date 路 required
tester name
text 路 required
client name
text 路 required
assessment type
select 路 required
in scope
textarea 路 required
out of scope
textarea 路 required
ip ranges
textarea 路 required
methodology
select 路 required
testing start
date 路 required
testing end
date 路 required
testing hours
select 路 required
notification
select 路 required
exploitation level
select 路 required
social engineering
select 路 required
dos testing
select 路 required
notification window
select 路 required
authorizing executive
text 路 required
executive title
text 路 required
emergency contact
text 路 required
emergency phone
text 路 required
tester emergency
text 路 required
tester emergency phone
text 路 required
critical notification
select 路 required
data handling
select 路 required
report format
select 路 required
report delivery
select 路 required
retest
select 路 required
testing fee
text 路 required
payment structure
select 路 required
payment terms
select 路 required
payment method
select 路 required
late fee
text 路 required
eo insurance
select 路 required
cyber insurance
select 路 required
tester personnel
select 路 required
lead tester
text 路 required
certifications
text 路 required
compliance
select 路 required
termination notice
select 路 required
governing state
select 路 required
tester signer name
text 路 required
tester signer title
text 路 required
client signer name
text 路 required
client signer title
text 路 required
Send this template with cryptographic proof
Every signed document gets PAdES-LTA digital signatures, dual RFC 3161 timestamps, and a tamper-proof evidence package sealed in WORM storage.