Planning tool · no sign-up
Prepare for your
penetration test.
Gather systems, workflows, requirements and deadlines. Work through the planning questions and record what still needs to be decided.
Guides & resources
Practical guides for
planning your penetration test.
Work out what needs testing, prepare your environment and understand what to ask for in your report. Use these resources with your team, whether you build software or run the systems your organisation relies on.
Start here
Turn your questions
into a useful test brief.
Prepare for your
Your assessment report
Understand the findings.
Plan your next steps.
See how your report brings together an executive summary, a summary of findings and detailed findings with reproduction steps, remediation steps and references.
UK + US guidance
Find the requirements
relevant to your work.
Choose the context that applies to your organisation. A system used in more than one market may need more than one guide.
Legal · UK
Prepare a legal
systems assessment.
Identify confidentiality concerns, gather workflow information and distinguish firm responsibilities from supplier requirements.
Legal · US
Connect your duties
to technical evidence.
Connect applicable policies and jurisdictional requirements to the systems you need assessed.
Healthcare · England
Choose the right
assessment scope.
Understand how DTAC, DSPT and NHS API onboarding differ, what to prepare and when provider eligibility matters.
Healthcare · US
Prepare around your
role and your product.
Work through HIPAA, consumer-health and medical-device considerations, then assemble the information needed to scope testing.
Worked examples
See how a workflow
becomes a test scope.
Two fictional briefs showing how workflows, testing priorities and boundaries shape an assessment. No completed engagement or findings are claimed.
Legal systems & AI workflows · fictional example
A legal document
and AI workflow.
See how document processing, matter boundaries and AI-connected data become a proposed scope, with evidence and limitations made explicit.
Healthcare software & integrations · fictional example
A patient portal
and clinical integration.
Explore a proposed scope across application workflows, APIs and sensitive information, including test preparation and third-party boundaries.
Let’s plan
your assessment.
Have an application, API or AI-enabled workflow you need assessed? Bring your priorities and deadline; we can help you work through the scope.