Cybersecurity Pentest Submission Form

CYBERSECURITY PENTEST SUBMISSION FORM AND AGREEMENT

RECITALS

THIS AGREEMENT is entered into as of Effective Date: by and between Client Name: (hereafter "Client") and Service Provider Name: (hereafter "Provider").

WHEREAS, Client seeks authorized cybersecurity testing services consisting of assessment, vulnerability identification and exploitation limited to agreed scope to evaluate security posture; and

WHEREAS, Provider represents that it employs personnel with the requisite skill, certifications and tools to conduct penetration testing in a manner designed to minimize disruption while identifying security weaknesses; and

WHEREAS, the parties desire to set forth the terms, scope, payment, confidentiality and liability allocation governing Provider's performance of penetration testing for Client.

SUBMISSION CONTACTS

SCOPE OF WORK

Provider will perform penetration testing services described below in accordance with the terms of this Agreement. The Scope of Work shall include testing methodologies, deliverables and exclusions identified by Client and agreed by Provider.

Proposed Testing Window: From to .

TEST TYPES (check all that apply)

External Network Internal Network Web Application Mobile Application Social Engineering (phishing) Cloud Configuration Review Source Code Review

AUTHORIZATION AND SAFETY

Client hereby represents and warrants that it has full authority to permit Provider to conduct the testing described herein against the listed assets and that such testing will not violate any third-party rights. Client expressly authorizes Provider to perform the specified testing within the agreed testing window and scope.

Provider will use commercially reasonable efforts to limit impact to Client systems. Provider will not intentionally destroy or alter Client data except as specifically consented to in writing. Provider will notify Client immediately of any unanticipated critical impact or data exposure.

PAYMENT TERMS

Client shall pay Provider the fees set forth below in consideration for the testing services and agreed deliverables. Fees are exclusive of applicable taxes unless otherwise required by law.

TERM AND TERMINATION

This Agreement commences on Start Date: and continues until End Date: unless earlier terminated in accordance with this Section.

Either party may terminate this Agreement for convenience upon written notice delivered at least days before the effective termination date. Either party may terminate immediately for material breach that remains uncured for 10 days after written notice or for lawful injunctions or governmental orders that prevent performance.

CONFIDENTIALITY

All non-public information, findings, reports and data disclosed by one party to the other in connection with this Agreement shall be considered Confidential Information. Provider shall not disclose Client Confidential Information except to personnel with a need to know, and shall implement reasonable safeguards to protect such information. Provider may disclose summarised, non-identifying findings for internal security research provided no Client-identifying information is included.

LIABILITY AND INDEMNIFICATION

Provider will perform services with reasonable care and in accordance with industry practice. Except for willful misconduct or gross negligence, each party's aggregate liability for direct damages arising out of this Agreement shall be limited to the total fees paid by Client to Provider under this Agreement. Client shall indemnify and hold harmless Provider from claims arising from Client's failure to obtain necessary authorizations from third parties or from Client-provided false or incomplete information.

REPORTING AND DELIVERABLES

Provider will deliver a written report summarizing findings, severity, evidence and recommended remediation steps within days following completion of testing. Interim communications of critical vulnerabilities will be provided immediately upon discovery as determined by Provider.

GOVERNING LAW; ENTIRE AGREEMENT

This Agreement shall be governed by and construed in accordance with the laws of the state or jurisdiction of Client's principal place of business as identified above unless the parties agree otherwise in writing.

This Agreement, together with any attachments and the written Scope of Work, constitutes the entire agreement between the parties with respect to the subject matter hereof and supersedes all prior and contemporaneous agreements and understandings, whether written or oral.

CERTIFICATIONS AND AUTHORIZATIONS

By signing below, Client certifies that it has the right and authority to authorize the penetration testing described in this Agreement, that all listed targets are owned or lawfully controlled by Client, and that Client assumes all responsibility for consequences of testing of any third-party system for which Client has not obtained authorization. Provider certifies that it will act within the authorized scope and will not exceed explicit permissions without written Client approval.

Client acknowledges that penetration testing may entail risk to availability and data integrity despite Provider's reasonable precautions; Client accepts those risks subject to the limitations set forth herein.

Client Authorization: Client authorizes Provider to commence testing as described and agrees to the terms of this Agreement.

Sign Now