Planning checklist & editable brief
Prepare for your
penetration test.
Gather what you know, record the open questions and give your team a shared starting point. This works for applications, APIs, SaaS and systems that use AI. You do not need every answer before talking to us.
Your preparation tool
Build a brief
you can work from.
Your notes and ticks stay in this page. They are not sent to MurtaSec or saved between visits. Use Copy brief below to keep the questions and your notes in your own document before leaving or refreshing.
Before scoping
01 / What do you need to learn or decide?
Describe the release, internal assurance review, significant change or other reason for testing. Include known concerns and previous testing where relevant.
02 / What needs testing?
List applications, APIs, mobile apps or AI-enabled workflows, versions, user roles and important integrations. Identify systems you own and any third-party components.
03 / What information and restrictions matter?
Describe data categories and relevant internal policies, contracts or assurance routes. Include approved environments, access locations and any provider-eligibility requirements.
04 / When do you need the results, and who is involved?
Record the decision date and room for fixes and retesting. Identify the technical contact, person approving scope and budget, and owner of remediation.
05 / What should the assessment help you act on?
Identify who needs the report, the technical evidence or format required, and any planned findings discussion or retest. Note anything still undecided.
Before testing
Work through these with the people responsible for the systems. A tick records planning progress; it does not itself authorise testing or confirm a security control.
Review your progress and next steps.
0 of 10 planning items reviewed
Copy the section headings, questions and your notes, followed by your checklist progress. Paste the brief into your own document to keep it or share it with your team.
Start a new brief
This clears the notes and ticks currently on this page. Copy any notes you want to keep into your own document first.
Let’s plan
your assessment.
Ready to discuss the scope? Tell us what you need assessed, the decision it supports and your deadline. Open questions are welcome.