ScopeMargin resources
Better questions make better quotes.
Working notes for the people who scope, price and deliver web-application penetration tests. Built to be useful alongside the tools you already use.
These guides are designed to sit alongside your firm's technical judgment and assessment methodology. They make scope facts and commercial assumptions easier to review.
01 — Scope worksheet
Web application pentest scoping checklist
A customer-ready way to turn the parts of a web application that change testing effort into explicit scope facts, assumptions and open questions.
02 — Delivery review
Quoted versus actual tester-days
A careful method for reviewing delivery variance without confusing extra effort, scope change, unbilled work and margin impact.