Yes, of course. You can test your clients' systems as long as you have authorization from them to do that. This is mostly applicable to consultancy companies that want to use our services in white label solution. On request, we can also provide white labeled reports with your branding.

What we need from you ?

It is mandatory that you have a clear authorization to have a penetration test performed against the target system from the owner of the target. It happens that the system is on a shared web hosting (or is a managed service), therefore you must notify and have permission from the provider of the service. We can also help you with that. Lastly, it is recommended to have a backup of the target system. 

Once payment is complete, please send us by email at contact@ga-political.com 

• The URL(s) of the target(s)
• A short description of the target application(s)
• A Letter of Authorization or representation in case the website is not yours.
• Your name and company name
• For Network Penetration Testing: How many IP addresses are in scope
• For API Penetration Testing: How many endpoints and API functions are in scope? Also, please mention if Black-Box or Grey-Box is required
• If applicable: Do you have any specific requirements for this engagement?
• The type of services required
  
• For Web Applications: Please mention if it's Black-Box or Grey-Box and, if Grey-Box, how many user roles you need to be tested. We usually recommend taking into account both a regular user and an admin role (for cross-users and privilege escalation testing)

Considering these elements, if our expert consider that your request is more complex and should be paid a better price, we will submit a specific invoice. 

But no problem, if you refuse the new invoice, you'll get fully refunded. In case of question, please contact us directly at contact@ga-political.com