Create your Statement of Work

Full transparency before you reach out. This is a preview that shows exactly how the agreement looks, with all my terms on authorization, scope, liability, confidentiality and privacy. Fill out as much or as little as you like, view the document in your browser, and download it as a PDF or an editable Word file.

This is only a preview of how the document looks. It is not an order and grants no access to anything whatsoever. Resources in scope are optional and agreed later. I send you the final SoW for electronic signing. No testing starts before the final scope is agreed and both parties have signed. Everything on this page is generated locally in your browser and sent nowhere.

Company name

Organization number (optional)

Contact person (signatory)

Title/role (optional)

Assets in scope (optional)

Scope mode

How far do you authorize the testing? Extension beyond the listed scope only reaches assets the Tester confirms you own – never third parties, and the exclusions (section 9) apply regardless of mode.

Listed scope onlyOnly the assets expressly listed are tested. Newly discovered assets are reported, but not tested without a written addendum.Extended – confirmed ownershipThe Tester may extend to newly discovered assets connected to the scope (subdomains, the Client’s IP/ASN ranges, related domains, internal systems reached from a foothold) once ownership is confirmed. Never third parties.Full – everything the Client ownsThe Client’s entire attack surface is in scope, however it is discovered, provided ownership is confirmed. Third parties are always excluded, and the exclusions in section 9 apply unchanged.

Test types

Web applicationsOWASP Top 10, authentication, authorization and API tests.

Network and cloudConfiguration, exposed services, Azure/M365 tenant.

Code reviewManual and automated review of critical components.

Phishing / social engineeringTimed emails, only if expressly agreed and authorized.

Include authenticated testing (I'll provide a dedicated test account with ordinary privileges).

Preferred timeframe (optional)

Additional notes (optional)

Yes, Erik can email me to follow up about a possible pentest. (optional)

SoW preview

Fill out the fields and click “Generate SoW”. You'll then see the full agreement and all the terms here, and can download it as a PDF or an editable Word file.

Want to move forward? Send a request, and we'll agree on the final scope and sign.

Need a custom SoW with different terms, its own scope, or special considerations? Get in touch, and we'll set it up together.