Authorization for Security Testing

1 · Authorization

("Client") hereby authorizes REDTEAM ("Service Provider") to conduct security testing against the targets listed in Section 2 below, for the period specified in Section 3, in accordance with the accompanying Statement of Work and Rules of Engagement.

This authorization confirms that the Client owns, operates, or is otherwise lawfully entitled to authorize testing of the listed targets, and that the testing is for the legitimate purpose of improving the Client's security posture.

2 · Authorized Targets

Add or remove rows as needed. Any target not listed here is out of scope and must not be tested.

3 · Validity

• Effective date:
• Expiry date: (authorization automatically expires; testing after expiry requires a renewed form)
• Extension: Any extension must be in writing, signed by the same authorized representative.

4 · Authorized Testing Activities

Testing is limited to the engagement tier and methodology in the Statement of Work, and is always subject to the Rules of Engagement. By default this includes:

• Reconnaissance, scanning, and enumeration of the targets above.
• Vulnerability discovery and proof-of-concept exploitation.

5 · Client Confirmations

6 · Limitations

This authorization does not extend to any third-party systems, partner infrastructure, or assets not listed in Section 2. Testing without written authorization is unlawful in Malaysia, and this form is the record of that authorization for the targets listed.

7 · Signatures

By signing below, the Client grants the authorization above, and the Service Provider acknowledges the scope and rules governing the engagement.

COMPANY STAMP