Free security checklists
Practical checklists and reference sheets from our pentest work, free to download as PDF. Use them to prepare for a penetration test, to review your own systems, or as a starting point for discussions with your team.
Pentest Readiness Checklist (PDF, 2 pages)
How to prepare for your penetration test: goals and scope, authorization, test accounts and access, operations and safety, and what to do after the test. ISO/IEC 27001 Control Mapping (PDF, 2 pages)
Which ISO/IEC 27001:2022 controls a penetration test can provide evidence for, what the standard does not require, and three questions to ask for every control. AI Agent and LLM Security Checklist (PDF, 2 pages)
For chatbots, RAG assistants and AI agents: prompt injection, access control in RAG, tool permissions, output handling and abuse protection, mapped to the OWASP Top 10 for LLM Applications (2025). Microsoft 365 and Entra ID Hardening Checklist (PDF, 2 pages)
Sign-in and MFA, privileged access, app consent, guests and external sharing, Exchange Online, Conditional Access and monitoring. DMARC Reference Sheet (PDF, 1 page)
All DMARC tags from RFC 7489 with their default and valid values.
How to prepare for your penetration test: goals and scope, authorization, test accounts and access, operations and safety, and what to do after the test. ISO/IEC 27001 Control Mapping (PDF, 2 pages)
Which ISO/IEC 27001:2022 controls a penetration test can provide evidence for, what the standard does not require, and three questions to ask for every control. AI Agent and LLM Security Checklist (PDF, 2 pages)
For chatbots, RAG assistants and AI agents: prompt injection, access control in RAG, tool permissions, output handling and abuse protection, mapped to the OWASP Top 10 for LLM Applications (2025). Microsoft 365 and Entra ID Hardening Checklist (PDF, 2 pages)
Sign-in and MFA, privileged access, app consent, guests and external sharing, Exchange Online, Conditional Access and monitoring. DMARC Reference Sheet (PDF, 1 page)
All DMARC tags from RFC 7489 with their default and valid values.