# AI penetration testing trial brief

Prepared by: ____________________
Date / intended start window: ____________________
Application and engineering owner: ____________________
Authority to test / approval reference: ____________________

Do not include passwords, API tokens, customer data, or private links in this brief.

## Decision to make

What should this evaluation help us decide?

____________________________________________________________

What evidence would justify adoption, a narrower use, or rejection?

____________________________________________________________

## Authorized scope

- Target environment and approved hosts:
- Excluded systems and actions:
- Permitted identities and roles (no credentials):
- Request limits, time window, stop conditions, and escalation owner:
- How external links and redirects stay within scope:

## Known conditions

Keep the answer key separate from the instructions given to the tester.

| Condition | Expected result | Observed evidence | Review status |
|---|---|---|---|
| Permitted action | | | |
| Forbidden action | | | |
| Expired test session | | | |
| Unreachable workflow | | | |

## Evidence and repair

- Target build and exposed product/version information:
- Action, effective role, request/response, and authoritative outcome:
- Reviewer and independent reproduction:
- Not-tested areas, tool failures, and unsupported claims:
- Proposed repair, developer reviewer, and regression criterion:
- Comparable retest after deployment:

## Operating decision

- Accepted job and exclusions:
- Setup, execution, and review effort:
- Access blockers and required help:
- Owner, next action, and review date:

Published by AI Penetration Tester. This is a blank evaluation resource, not a completed benchmark or authorization to test any system.

Guide: https://aipenetrationtester.com/
Checklist: https://aipenetrationtester.com/evaluation-checklist/
Service scope: https://aipenetrationtester.com/featured-provider/