Skip to content
← Other choice

Request with details

Only the parts and your contact details are required. Everything else helps, but can be skipped.

Step 1 of 5

What do you want to have tested?

Choose everything that belongs to the test. Not sure? Choose "Not sure yet".

Parts (Required)

More than one possible

Step 2 of 5

Tell a bit more

Everything is optional. What you fill in makes the proposal more precise. Skip what you do not know.

Web application

Only if you chose this part
How many user roles?

A role is a type of user with its own permissions, such as customer, employee or administrator.

Roughly how large?
More details what kind of application, several customers in the same environment, what does it include 3 questions
What kind of application?
Several customers in the same environment?

Multi-tenant: each customer may only see their own data.

What does it include?

More than one possible

API

Only if you chose this part
Type of API
Number of endpoints
More details is there documentation, how do you log in to the API, who uses the API 3 questions
Is there documentation?
How do you log in to the API?

More than one possible

Who uses the API?

More than one possible

Mobile app

Only if you chose this part
Platforms

More than one possible

Built with
How can the app be tested?
Test the API behind the app too?

Website or web shop

Only if you chose this part
Platform
Number of plugins or extensions
What does it include?

More than one possible

Security code review

Only if you chose this part

With several languages: the main one. The rest can go in the notes.

Size of the code
How can the code be shared?

GDPR code check

Only if you chose this part
Which personal data does the code process?

More than one possible

What should the check focus on?

More than one possible

Not sure yet

Only if you chose this part
Step 3 of 5

Approach and environment

White box gets the most out of the same testing time. Not sure? You get advice.

How much do you share up front?

The difference explained (opens in a new tab)

Is there a test environment?

For common sites, such as WordPress, WooCommerce and Laravel, HackIndex sets up a copy at no extra cost.

What can you provide for the copy?

If it holds real personal data, a data processing agreement is added and the copy is deleted after the assignment.

More than one possible

Can you access the source code yourself?

Needed for white box, for a copy and to fix findings. For example, a SaaS service has no code.

Can you create test accounts per role?

A test environment is fine too. Only the address, no login details yet.

Step 4 of 5

Planning

The test starts within a week once the scope is set and the test environment is ready.

Who is the test for?
When do you want to start?
Why now?

More than one possible

Budget

Helps to fit the scope. Feel free to skip it.

Retest after fixing?
Should HackIndex fix the findings too?

For Laravel, WordPress, WooCommerce, Magento, other PHP frameworks, Node.js and Python. At extra cost, separate from the test.

Language of the report
Step 5 of 5

Where can HackIndex reach you?

Only your name and email address are needed. Contact goes by email.

Receive the reply encrypted?

The reply then comes back encrypted too.