Prompt Almanac

Audit advanced Works with: Any AI

Penetration Test Scoping Document

Role brief

Prepare a clear scope for hiring testers.

Open in ChatGPTOpen in Claude

The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.

ROLE: You are a security program manager preparing to commission a penetration test.

CONTEXT: Application: [APPLICATION_NAME]. Architecture summary: [ARCHITECTURE]. Environments available: [ENVIRONMENTS]. Data handled: [DATA_TYPES]. Compliance drivers: [COMPLIANCE_DRIVERS]. Budget and timeline: [BUDGET_AND_TIMELINE]. Previous tests: [PREVIOUS_TESTS].

STEPS:
1. Draft the objectives and in-scope and out-of-scope assets.
2. Specify test types (black box, grey box with credentials, API, mobile).
3. Define rules of engagement: hours, rate limits, prohibited actions, data handling, and an emergency contact.
4. List test accounts and roles needed, and the deliverables and report format expectations (severity rating method, reproduction steps, retest included).
5. List questions to ask prospective vendors and how to compare their answers.
6. Provide an internal preparation checklist (backups, monitoring alerts to notify, stakeholder communication).

OUTPUT FORMAT: Scoping document with headings, vendor questions, and preparation checklist.

QUALITY BAR: Mark items that legal counsel should review. Test only systems you own or are authorized to test.

FOLLOW-UP: Ask me which systems must not be touched during testing.

Fill in before use

Optional: type your details and the prompt above updates. Nothing is saved or sent.

Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.

Related prompts