Pentest Team Maturity Scorecard

Use your own assessment of the team's practices to identify areas worth investigating, including scoping, technical support and leadership load.

7 dimensions21 questionsResults by email

Use self-assessment to choose where to look. Use delivery evidence to examine what changes.

The scorecard and the Pentest Team Performance Framework are complementary, but they do not use the same dimensions because they answer different questions.

Which practices and capabilities are in place?

  • Seven capability areas and 21 self-assessment questions.
  • Based on an honest view of how the team operates under pressure.
  • Produces a maturity profile, strengths, gaps, and practical next steps.

What does delivery evidence show over time?

  • Five lenses for reading operational measures together.
  • Uses project, QA, client-friction, capacity, and development evidence.
  • Helps a team test whether an improvement is changing real delivery.
Explore the performance framework

A scorecard result does not convert into a framework score. Use it to choose where to look; use the framework to choose a small set of measures for that problem.

Test the explanation against the work.

A diagnostic examines actual reports, QA records and conversations with the people involved. It tests possible causes and sets out the evidence, uncertainties and next decisions.

Coaching and leadership support help the team change its practice, with agreed responsibilities and review of subsequent work. You can discuss that support without completing this scorecard.

Send my results

The live preview shows the score. The email includes the fuller interpretation, including context from your role, team size, and pressure point. Marketing emails are optional and recorded separately from the scorecard result.

We use your wording only to select up to four broad themes. Your note is not stored or sent to the AI provider. Do not include confidential details.

We’ll use your details to send your scorecard result. The emailed result may include AI-assisted interpretation using deterministic scorecard context and predefined themes, never your note wording. See the Privacy Notice.

Rate each statement

Use your best current view. The score is most useful when it reflects what happens under real delivery pressure, not what exists in theory.

Loading questions...