1. An Internal peer review and technical QA of the test findings will be conducted by the Veracode team upon test completion.
2. The customer will receive an email notification when the results are published and available for review/download from the following location:
   1. Veracode Platform:  https://web.analysiscenter.veracode.com/login/#/landing 
3. Report Delivery is 5 business days after the test completion.

1. Upon request, customers may schedule a one-hour consultation call to discuss the findings from the Assessment. During this consultation call, the customer will be provided the opportunity to ask specific questions related to the test and recommendations for remediation of flaws.
2. Requests for mitigations of flaws within the report should be submitted to pentesting@veracode.com.
   1. Mitigation requests need to include the following information:
      1. A link to the application profile -or- the application name and date of test/retest.
      2. The CWE ID to be mitigated.
      3. The mitigation category (design, infrastructure, network, other, etc.)
      4. Mitigation comments
      5. The name of the customer resource who will be assuming responsibility for the mitigation.

1. If purchased separately, you may request a retest to confirm remediation of previously identified flaws.  * PTaaS subscriptions include 1 retest
   1. To request a retest, use the template below making sure to include include a list of flaws to be retested to pentesting@veracode.com.
   2. Once your request has been received, you will be asked to upload an updated logistics document to the provided location.
   3. Veracode Support will schedule the retest and a new report will be issued after the retest.

1. A PTaaS subscription entitles you to 3 quarterly checkpoint tests following your initial comprehensive test.
2. The 1st of 3 checkpoints will be scheduled by our team roughly 90 days from the date of the completion of your initial comprehensive test and the following two thereafter.

MPT Retest Scheduling Request Template

1. CWEs to retest:
2. Veracode Platform URL: [ Paste Link to Veracode Platform Application Profile link here]
3. Client POC Information: [List names /email addresses here]