Penetration Test & Red Team Rules of Engagement

Rules of engagement for scoped penetration testing and adversarial red team work — authorization, targets, allowed and prohibited techniques, testing window, access plan, evidence handling, emergency stop, and reporting. Covers web/API, cloud, authenticated, business-logic, and AI/agentic testing.

Rules of engagement for scoped penetration testing and adversarial red team work — authorization, targets, allowed and prohibited techniques, testing window, access plan, evidence handling, emergency stop, and reporting. Covers web/API, cloud, authenticated, business-logic, and AI/agentic testing. A signer-ready draft is prepared during scoping and auto-populated with your engagement details. To review the full terms now, contact hello@davidwolf.org.

This document is a negotiation draft. Final terms may vary by scope, jurisdiction, and client requirements. All bracketed placeholders must be completed before execution.