HexFort Security | Think Like an Attacker. Build Like a Defender.

Master template: VAPT Engagement Letter & Scope Template.pdf. Your submission will be reviewed against the agreed scope, exclusions, emergency contacts and commercial terms. This online form is an intake and consent record, not a substitute for reviewing the final engagement letter.

1. Client and authorized representative

Client legal name *

Client email *

Client phone *

Company / organization *

Authorized representative name *

Designation / title *

Client address *

2. Engagement and scope

Selected service *

In-scope assets (URLs, domains, IP/CIDR, hostnames) *

Environment

Permitted testing hours *

Proposed start date *

Proposed end date *

Explicitly out-of-scope assets / systems *

Blackout dates / no-test windows

Testing source IPs or source note

Fee (INR)

Fee (USD)

Special instructions

3. Emergency contact

Contact name *

Phone *

Email *

4. Signature and document submission

Choose signing method

Authorized representative full name as signature *

I confirm I am authorized to request testing of the listed assets, that the scope is accurate, and that any required third-party permissions have been obtained. I understand that testing cannot begin until HexFort Security reviews and manually approves the engagement and the final documents.

The typed-name option records the submitted name and timestamp. Its legal sufficiency should be reviewed for your use case; use the signed-PDF option if a handwritten/e-signature document is required.

By submitting, you agree that the details are used to prepare and review this engagement. Avoid entering passwords or unnecessary sensitive production data in this form.

Engagement details & consent

1. Client and authorized representative

2. Engagement and scope

3. Emergency contact

4. Signature and document submission