Security Penetration Test Offer

SECURITY PENETRATION TEST OFFER

Offer Date:     Provider Name:     Client Name:

WHEREAS

WHEREAS, Provider represents that it is duly qualified and experienced in performing authorized security assessments, vulnerability scanning, and penetration testing against information systems and networks; and

WHEREAS, Client seeks to engage Provider to perform a security penetration test of specified information assets under the terms and conditions set forth in this Offer; and

WHEREAS, Provider is willing to provide the services described herein subject to Client's authorization, scope limitations, and payment of fees.

SCOPE OF WORK

Provider shall perform a penetration test in accordance with the scope selected below and the detailed description provided by Client. The objective is to identify security weaknesses that could permit unauthorized access, data disclosure, service disruption, or other adverse business impact. Testing shall be performed in a professional manner consistent with industry standards and applicable laws.

External network penetration test
Internal network penetration test
Web application penetration test
API testing
Mobile application testing
Social engineering (phishing/phone)

Start Date:    End Date:    Business Hours:

REPORTING AND DELIVERABLES

Provider will deliver an interim findings summary (if requested) and a final written report documenting identified vulnerabilities, evidence, risk ratings, and recommended remediation steps. Provider shall not disclose exploit code or excessive detail that would enable widespread exploitation beyond Client's remediation activities without Client's consent.

Retest after remediation included:    Interim report required:

PAYMENT TERMS

Client shall pay Provider the fees set forth below in consideration for the services rendered. Fees are exclusive of taxes and any third-party costs unless otherwise stated.

TERM AND TERMINATION

This Offer commences on Start Date and continues until End Date, unless earlier terminated in accordance with this section. Either party may terminate for convenience upon prior written notice to the other party given at least the required notice period. Termination does not relieve Client of payment obligations for services performed prior to termination.

Start Date:    End Date:    Notice Period (days):

CONFIDENTIALITY

Each party shall keep confidential all non-public information disclosed in connection with this Offer, including test results, vulnerabilities, and remediation details (collectively, Confidential Information). Provider will use Confidential Information solely to perform the services and will not disclose such information to third parties except to personnel and subcontractors who have a need to know and are bound by confidentiality obligations at least as protective as those herein. Confidential Information does not include information that is or becomes public other than by a breach of this Offer, is lawfully received from a third party, or is required to be disclosed by law or regulation, provided the disclosing party gives prompt notice to the other party and cooperates in any lawful effort to limit the disclosure.

Upon completion or termination, Provider shall, at Client's election, return or securely destroy Client Confidential Information in Provider's possession, and shall certify such destruction in writing upon Client's request.

DATA HANDLING

Provider will collect only information necessary to perform the services. Provider shall protect collected data using commercially reasonable administrative, physical, and technical safeguards. Provider will retain test data only for the period reasonably required to perform the services and deliver reports, after which Provider will remove or destroy such data in accordance with Client's instruction.

LIMITATION OF LIABILITY AND INDEMNITY

Except for willful misconduct or gross negligence, Provider's aggregate liability for any claim arising out of or related to this Offer, whether in contract, tort, or otherwise, shall not exceed the total fees paid to Provider for the services under this Offer. In no event shall Provider be liable for incidental, consequential, special, or punitive damages, including loss of profits, loss of data, or business interruption.

Client shall indemnify and hold Provider harmless from and against claims arising from Client's intentional misuse of deliverables, failure to authorize tests, or violation of third-party rights, except to the extent such claims result from Provider's breach of this Offer or gross negligence.

COMPLIANCE WITH LAWS

Provider and Client shall comply with applicable laws, regulations, and contractual obligations of third parties in the performance of the services. Client represents that it has the authority to authorize the specified testing against the systems and assets identified in this Offer.

GOVERNING LAW

This Offer shall be governed by and construed in accordance with the laws of the State of , without regard to conflict of laws principles.

ENTIRE AGREEMENT

This Offer, together with any statements of work, attachments, and accepted amendments in writing signed by both parties, constitutes the entire agreement between the parties with respect to the subject matter hereof and supersedes all prior or contemporaneous understandings, agreements, representations, and warranties, whether written or oral.

ACCEPTANCE

To accept this Offer, Client must sign below and return a signed copy to Provider. Acceptance constitutes Client's agreement to and authorization of the scope, schedule, and terms herein.

Sign Now