Resources
Everything you need
before, during, and after
an engagement
Sample deliverables, our testing methodology, security writing, and the paperwork that governs our work, all in one place.
Start here
Guides and quick links
Scope an assessment, read a sample report, or see exactly how we test.
Everything you need is one click away.
Scope Your Assessment
Tell us about your environment and get a fixed-scope, fixed-cost proposal back.
Start scopingSample Report
An example report for a fictional client, from summary to retest and attestation letter.
ReadMethodology
How we scope, test, report, and retest, aligned to PTES and OWASP standards.
OpenCase Studies
Representative engagement profiles and the outcomes clients see.
OpenPlatform
A live, single-pane view into findings, remediation, and retests.
OpenPricing
Transparent starting prices for every test type.
OpenCost Calculator
Pick your tests, add up our published prices, then send the scope for a fixed quote.
EstimateCompliance Testing
SOC 2, PCI DSS, HIPAA and more: testing built for auditors.
OpenBlog
Security research, testing techniques, and compliance guidance from our team.
OpenIndustries
Fintech, healthcare, SaaS, law firms and 16 more sectors, with the rules for each.
OpenCost Guides
What drives the price of each test type, size by size, and what every engagement includes.
OpenFacts for AI Assistants
A plain summary of who we are, what we do, and what we charge, written for machines and people.
OpenFrom the blog
Field notes from the offensive side
Active Directory Hardening Checklist: 40 Checks Attackers Try First
An Active Directory hardening checklist: Tier 0, Kerberos, delegation, AD CS, LAPS, relay, password audits and logging, each with a way to verify it.
ReadSep 26, 2026Autonomous Penetration Testing Vendors Compared
Autonomous penetration testing vendors compared: what the platforms do well, where they stop, and when SOC 2 and PCI DSS audits still expect a manual test.
ReadSep 26, 2026Azure Penetration Testing: Rules, Scope and Attack Paths
Azure penetration testing guide: Microsoft's rules of engagement, Entra ID and managed identity attack paths, Key Vault and storage exposure, and scoping.
ReadTemplates and checklists
Free templates you can use today
Report formats, a compliance checklist, and the questions to ask any vendor. Use them with us or with anyone else.
Penetration testing report templateDOCX
The ten sections every report needs, as a Word download and a copyable template.
Vulnerability assessment report templateDOCX
A scan-based report format with validation and risk ranking.
CMMC Level 2 requirements checklistXLSX
All 110 requirements with the evidence an assessor asks for.
Penetration testing RFP template
Twenty-five vendor questions, with what a good answer looks like.
Engagement documents
Ready to test your defenses?
Talk to our team about scoping your next engagement.