We’ll confirm the assets you want tested, agree on the right methodology (black box, grey box, etc.) and align on compliance requirements (UK GDPR, PCI DSS, ISO 27001, etc.). You’ll also choose your testing cadence, whether it'll be one-time, on-demand, or continuous.