Automated scan
Broad repeatable coverage, fast and suitable for monitoring.
GUIDE
Penetration testing: definition, preparation and deliverables.
A pentest measures the real resistance of a target within a controlled scope. It complements automated scans when business logic, access rights or exploitability need human validation.
✓ Authorised scope✓ Bounded tests✓ Actionable report✓ Retesting
Questions to prepare before the engagement
01
What scope?
Domains, APIs, accounts, environments and components included.
02
What objective?
Access control, data exposure, release readiness, customer requirement or post-incident validation.
03
What limits?
Time window, rates, exclusions, sensitive data and prohibited destructive tests.
04
What accounts?
User profiles required to test authorisation and authenticated journeys.
05
What deliverable?
Expected executive summary, evidence, debrief and retesting.
Scan or pentest?
Expert pentest
Scenarios, business logic, controlled exploitation and human validation.
Both
Scanning provides breadth; pentesting adds depth and context.