Pentesting RFP Questionaire

dustervoice

Anyone know where i can find a decent security questionaire for selecting a pentesting vendor? I've tried Mr Google but nothing good so far. I know i can come up with a list myself but i wanted to see if there is anything i might be missing or have not thought about. Thanks

TheFORCE

Did you take a look at this https://www.owasp.org/index.php/OWASP_RFP-Criteria ?

dustervoice

Thanks for this but was looking for something aligned more with infrastructure testing not only apps but from what i can see there are lots of questions here that i can include.