Manual Penetration Test - Scheduling Process

The start of each Assessment(s) is coordinated between our Customer Success Operations Team and the customer contact. Customers will be required to complete a logistics worksheet prior to the scheduling of the Assessment. The logistics worksheet will contain information needed to start the Assessment including; Veracode's source IP address(es), Test accounts for the Application(s) (usernames/passwords), URL(s) for Application(s), VPN access (if applicable and required for Assessment). Customers are required to initiate the scheduling process using the steps listed below.
  1. Using the below Scheduling Request Template, submit a scheduling request to pentesting@Veracode.com.
  2. If it’s discovered that the application has not yet been scoped by a member of our Penetration Testing team, the request will be redirected to the scoping queue and a call will be set up with our MPT Project Coordinator.  (See info regarding scoping below)
  3. Our Customer Success Operations Team will send the logistics worksheet to be completed prior to scheduling of engagement
  4. Once our Customer Success Operations Team receives the uploaded completed logistics document, they will schedule the test on the next available date, unless a specific start date is requested (dependent on availability). If the logistics worksheet is not submitted, the engagement(s) will not be scheduled, and the Assessment will be delayed.
  5. Scheduling availability for Assessment can vary day to day.
  6. Once scheduled, a Scheduling Confirmation email is sent, including the assigned Veracode Pen Tester and dates of testing.

Scheduling Request Template:

Send to: pentesting@veracode.com
Email Subject: MPT Scheduling Request – CUSTOMER NAME – APPLICATION/TARGET NAME
Hello Services Operations,
We are ready to begin the scheduling process of TARGET NAME.
We would like this test to begin on **Choose only one of the below options**
A. The next available date (lead times vary, but currently average 6-8 weeks).
B. On a specific date (given in MM/DD/YYYY format)
(Name and email) is the contact for this engagement. Please include them on all communications
 

Scoping Process (if necessary):
The scoping request initiates coordination of a Scoping call. During a scoping call, Customer should be prepared to:
  1. Attend a scoping call with your Veracode contact and a member of the Manual Penetration Testing team.  (Scheduled by the MPT Project Coordinator)
  2. Provide a high-level overview and demo of the application, API, or network functionality so that an accurate level of effort, or scope, can be determined. This scope will allow the Veracode team to plan for the level of effort required to test the target.

Topics (1)

Related Articles

Related Topics

    Ask the Community

    Get answers, share a use case, discuss your favorite features, or get input from the Community.