Definition of an "application" for Penetration Testing Purposes

We are planning for our application to be penetration tested.

Our application is actually a series of tools that comprise one bigger end-to-end system.

Each of these tools is accessible via a singular, identity-managed portal.

The question is, how do 3rd party penetration testing firms define an "application",

From a cost perspective, it is important to understand if they would consider this situation to be one application or multiple applications due to the way it was architected.

Thanks for any feedback! submitted by /u/jerseycat10
[link] [comments]


http://dlvr.it/T6B1QS