Answer
3-5 daysCustomer Security Response
Review known facts and speak with your team. No active testing.
Start with the business request. Decide whether you need an answer, a test, or practical setup help.
How to choose
- Questionnaire, buyer email, old report, or customer follow-up: Customer Security Response.
- A pentest request that still needs scope and test goals: Pentest Plan + Focused Test.
- Product security, SDLC, issue triage, or incident response: Product Security Setup.
Scope
1-2 weeksPentest Plan + Focused Test
Review what may need testing, why, access, and limits. Then test the agreed scope.
Setup
2-4 weeksProduct Security Setup
Review and set up product security, SDLC procedures, issue triage, and IR steps.