NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
[>_] ROOM · Cybersecurity
Scoping & Rules of Engagement
Master the most critical phase of any pentest. Learn how to define scope, draft rules of engagement, and secure legal authorization before testing begins.
Room tasks
1What is Scoping & Why It Protects Both Parties
2Defining Scope: In Scope vs Out of Scope Assets
3Rules of Engagement Document Walkthrough
4Legal Considerations
5Black Box vs Grey Box vs White Box Testing
Frequently Asked Questions
What are rules of engagement in a penetration test?
Rules of engagement (RoE) are the written agreement that sets what testers may do, which systems are in scope, when testing happens, and who to contact if something breaks. They protect both the client and the tester.
Why is scoping the most important phase of a pentest?
Scoping defines targets, depth, timing, and limits before any testing starts. A clear scope prevents accidental damage, legal trouble, and scope creep, and it makes the final price and report match what the client expects.
Do I need written authorization before pentesting?
Yes. Testing without explicit written permission can be illegal even with good intentions. Authorization documents name the systems, dates, and testers. You can learn how they are structured in this free Codelivly room.