Start with your objectives
Record what you need to understand about your systems. List the applications, domains, IP addresses or ranges to test, who hosts each one, and anything that must be excluded.
Describe the environment
Include the environment and any authentication requirements. Add your organisation and contact details so your testing team can discuss the scope with you. When testing can take place, testing rules and notes for your testing team are optional. Each service’s page lists what we’ll ask you for.
Choose how to submit
Complete the online scoping form or upload your own PDF or Word (.docx) document in the client portal. You can save a draft and add supporting files before submitting. Your uploaded scoping document must pass a malware scan before you submit it.
Review before you authorise
Your testing team reviews the scope and raises questions in the Discussion tab. Once agreed, approve the specific version and confirm your authority to test its assets. Testing cannot begin before you authorise it.