The initial step is defining the scope and aims with the pentest. It involves outlining the "rules of engagement," such as: Not all penetration checks are done precisely the same way and could vary dependant upon the scope in the job along with the supposed final result of the check. Let's c