Skip to content

Request a penetration testing quote

Describe what you want tested, in your own words. We reply within one business day.

Prefer email? Write to info@greysurface.com.

Your request

No exact scope needed

Roles, environments or a deadline. Leave out passwords, keys and customer data.

We use these details to reply to this request and plan any work that follows. See the privacy policy (opens in a new tab).

How the form handles it
  1. Your browserSends it over HTTPS
  2. This websiteChecks it, keeps none of it
  3. Email providerDelivers it to us
  4. GreySurfaceReads it and replies
sent to
This website only, over HTTPS
checks
Spam trap, size limit, rate limit
delivered
By email to GreySurface
kept here
None of your answers
trackers
None

What happens after you send this form?

  1. You send the outline

    Rough notes are fine: what you run, who uses it and when.

  2. We scope it together

    We agree targets, user roles and access with you. Your quote follows.

  3. Testing starts on dates you agree

    Once you approve a written scope like the sample below.

Sending this request does not commit you to anything. You decide after you have seen the agreed scope and the quote.

What should you tell us?

systems
app names, hosts or a short description
users
the kinds of user, such as customers and admins
off limits
anything we must leave alone
timing
when you need it, and what it is for

Before you send it, you can read how a GreySurface test runs or how we price a penetration test.

What goes into a written scope?

A written scope names what we test and as which users, what we leave alone and how we work on live systems. This sample uses Acme Corp, a fictional company.

Sample: Acme Corp

In scope

  • app.acme-corp.com
  • api.acme-corp.com

Tested as customer, support and admin users

Out of scope

  • Payment provider
  • Office network

Live, in agreed windows

  • Named contact
  • No destructive actions