{"id":7089,"date":"2026-07-18T16:33:24","date_gmt":"2026-07-18T14:33:24","guid":{"rendered":"https:\/\/www.digitalnisebeobrana.cz\/?page_id=7089"},"modified":"2026-07-18T17:22:14","modified_gmt":"2026-07-18T15:22:14","slug":"penetracni-test-na-miru","status":"publish","type":"page","link":"https:\/\/www.digitalnisebeobrana.cz\/en\/penetracni-test-na-miru\/","title":{"rendered":"Custom Penetration Test"},"content":{"rendered":"<p><strong>A larger or more sensitive application should not be forced into a fixed-scope security review.<\/strong> A custom penetration test is scoped around the actual system, user roles, APIs, environments and risks you need to verify.<\/p>\n<p>We first define the objective, permissions and boundaries of the test. This makes it clear what will be tested, what the deliverable will include and what remains outside the agreed scope.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"When_a_custom_penetration_test_makes_sense\"><\/span>When a custom penetration test makes sense<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ul>\n<li>the application does not fit within the fixed Website Security Review scope;<\/li>\n<li>it has multiple user roles, environments, workflows or integration points;<\/li>\n<li>it handles more sensitive data, administrative access or important business processes;<\/li>\n<li>it includes a larger API or more complex permission logic;<\/li>\n<li>you need to verify a specific risk scenario rather than complete a generic checklist;<\/li>\n<li>the application needs to be assessed together with selected parts of its server, deployment or access controls.<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"What_the_test_may_include\"><\/span>What the test may include<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The exact scope is defined around the objective of the engagement. The following areas are therefore not automatically included in every test.<\/p>\n<ul>\n<li>the web application and its public and authenticated areas;<\/li>\n<li>APIs and integration points;<\/li>\n<li>authentication, session management and account recovery;<\/li>\n<li>authorisation, user roles and separation of data;<\/li>\n<li>administrative interfaces and application logic;<\/li>\n<li>forms, inputs, file uploads and file handling;<\/li>\n<li>the server, deployment process and selected infrastructure components;<\/li>\n<li>accounts, access controls and internal security practices where they affect the tested system.<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"How_the_scope_is_defined\"><\/span>How the scope is defined<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Before testing begins, we define:<\/p>\n<ul>\n<li>what the test needs to verify and what decision the result should support;<\/li>\n<li>which systems, domains and environments are included;<\/li>\n<li>which accounts, roles and permissions will be available;<\/li>\n<li>which workflows and risk scenarios have priority;<\/li>\n<li>which data and operational constraints must be respected;<\/li>\n<li>how detailed the deliverable needs to be;<\/li>\n<li>the timeframe and price.<\/li>\n<\/ul>\n<p>Testing outside the confirmed scope is not automatically included.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"What_you_receive\"><\/span>What you receive<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ul>\n<li>a concise summary of the main risks and their practical impact;<\/li>\n<li>a prioritised list of findings;<\/li>\n<li>the technical detail and evidence needed to understand each issue;<\/li>\n<li>clear remediation recommendations;<\/li>\n<li>a distinction between serious issues and lower-priority improvements;<\/li>\n<li>a technical appendix where required by the agreed scope.<\/li>\n<\/ul>\n<p>The goal is not to deliver a long automated output. The report should make it clear what matters and what your developer or administrator should address first.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"How_the_engagement_works\"><\/span>How the engagement works<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ol>\n<li><strong>Send a brief description of the system.<\/strong> Basic information about the application, roles, environments and what you need to verify is enough to start.<\/li>\n<li><strong>We define the scope.<\/strong> We clarify the objective, permissions, tested components, boundaries and required deliverable.<\/li>\n<li><strong>You receive a concrete proposal.<\/strong> It includes the agreed scope, price and schedule.<\/li>\n<li><strong>Testing takes place.<\/strong> The test follows the confirmed boundaries and permissions.<\/li>\n<li><strong>You receive the deliverable.<\/strong> Findings are prioritised by severity, impact and recommended next steps.<\/li>\n<\/ol>\n<h2><span class=\"ez-toc-section\" id=\"What_is_not_automatically_included\"><\/span>What is not automatically included<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ul>\n<li>remediation of the identified issues;<\/li>\n<li>a retest after remediation;<\/li>\n<li>testing of systems or features outside the confirmed scope;<\/li>\n<li>ongoing responsibility for the security of the application;<\/li>\n<li>a compliance or certification audit;<\/li>\n<li>a guarantee that the application contains no other vulnerabilities;<\/li>\n<li>work without clear authorisation from the system owner.<\/li>\n<\/ul>\n<p>Remediation, hardening or a retest can be agreed as separate follow-up work.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"When_the_Website_Security_Review_is_enough\"><\/span>When the Website Security Review is enough<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>For one smaller web application, one domain or environment, up to three user roles and up to five main application workflows, the fixed-scope <strong>Website Security Review<\/strong> may be a better fit.<\/p>\n<p>It has a fixed scope, a price of CZK&nbsp;35,000 and typical delivery within seven business days after the scope and required access have been confirmed. If the application exceeds those boundaries, a Custom Penetration Test is the appropriate next step.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Penetration_test_pricing\"><\/span>Penetration test pricing<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><strong>The price is determined after a short scoping process.<\/strong><\/p>\n<p>It depends mainly on the size and complexity of the system, the number of roles and environments, API scope, required testing depth, operational constraints and the required deliverable.<\/p>\n<p>Once the scope has been confirmed, you receive a concrete proposal rather than an open-ended hourly estimate.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Discuss_the_test_scope\"><\/span>Discuss the test scope<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Send a brief description of the application, user roles, environments and what you need the test to verify. If the fixed Website Security Review is a better fit, I will tell you.<\/p>\n<p><strong><a href=\"\/en\/kontakt\/\">Discuss the penetration test scope<\/a><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A custom penetration test for larger, more complex or more sensitive applications. <\/p>\n","protected":false},"author":1,"featured_media":7098,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_vp_format_video_url":"","_vp_image_focal_point":[],"footnotes":""},"class_list":["post-7089","page","type-page","status-publish","has-post-thumbnail","hentry"],"translation":{"provider":"WPGlobus","version":"3.0.2","language":"en","enabled_languages":["cs","en"],"languages":{"cs":{"title":true,"content":true,"excerpt":true},"en":{"title":true,"content":true,"excerpt":true}}},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Custom Penetration Test - DIGITAL SELF-DEFENSE<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.digitalnisebeobrana.cz\/penetracni-test-na-miru\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Custom Penetration Test - DIGITAL SELF-DEFENSE\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.digitalnisebeobrana.cz\/penetracni-test-na-miru\/\" \/>\n<meta property=\"og:site_name\" content=\"DIGITAL SELF-DEFENSE\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/digitalnisebeobrana\/\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-18T15:22:14+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.digitalnisebeobrana.cz\/wp-content\/uploads\/2026\/07\/pentest2-1024x768.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@sodomak\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.digitalnisebeobrana.cz\\\/penetracni-test-na-miru\\\/\",\"url\":\"https:\\\/\\\/www.digitalnisebeobrana.cz\\\/penetracni-test-na-miru\\\/\",\"name\":\"Custom Penetration Test - DIGITAL SELF-DEFENSE\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.digitalnisebeobrana.cz\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.digitalnisebeobrana.cz\\\/penetracni-test-na-miru\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.digitalnisebeobrana.cz\\\/penetracni-test-na-miru\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.digitalnisebeobrana.cz\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/pentest2.png\",\"datePublished\":\"2026-07-18T14:33:24+00:00\",\"dateModified\":\"2026-07-18T15:22:14+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.digitalnisebeobrana.cz\\\/penetracni-test-na-miru\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.digitalnisebeobrana.cz\\\/penetracni-test-na-miru\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.digitalnisebeobrana.cz\\\/penetracni-test-na-miru\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.digitalnisebeobrana.cz\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/pentest2.png\",\"contentUrl\":\"https:\\\/\\\/www.digitalnisebeobrana.cz\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/pentest2.png\",\"width\":1448,\"height\":1086},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.digitalnisebeobrana.cz\\\/penetracni-test-na-miru\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.digitalnisebeobrana.cz\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Custom Penetration Test\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.digitalnisebeobrana.cz\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.digitalnisebeobrana.cz\\\/en\\\/\",\"name\":\"DIGITAL SELF-DEFENSE\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.digitalnisebeobrana.cz\\\/en\\\/#\\\/schema\\\/person\\\/e932432719ebfc02a9b05e7b12047736\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.digitalnisebeobrana.cz\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/www.digitalnisebeobrana.cz\\\/en\\\/#\\\/schema\\\/person\\\/e932432719ebfc02a9b05e7b12047736\",\"name\":\"Milan\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.digitalnisebeobrana.cz\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/logo.png\",\"url\":\"https:\\\/\\\/www.digitalnisebeobrana.cz\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/logo.png\",\"contentUrl\":\"https:\\\/\\\/www.digitalnisebeobrana.cz\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/logo.png\",\"width\":613,\"height\":73,\"caption\":\"Milan\"},\"logo\":{\"@id\":\"https:\\\/\\\/www.digitalnisebeobrana.cz\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/logo.png\"},\"description\":\"Jmenuji se Milan P\u016flkr\u00e1bek, pamatuji si po\u010d\u00edta\u010de bez internetu, Internet bez Google a mobiln\u00ed komunikaci bez \u0161ifrov\u00e1n\u00ed. M\u00e1m za sebou v\u00edce ne\u017e dvacet let profesion\u00e1ln\u00ed praxe v IT, p\u0159edn\u00e1\u0161\u00edm a p\u00ed\u0161u \u010dl\u00e1nky o IT bezpe\u010dnosti, kryptom\u011bn\u00e1ch a nov\u00fdch technologi\u00edch. Od roku 2014 jsem sou\u010d\u00e1st\u00ed nezikov\u00e9 organizace Paraleln\u00ed Polis v Praze.\",\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/digitalnisebeobrana\\\/\",\"https:\\\/\\\/x.com\\\/sodomak\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Custom Penetration Test - DIGITAL SELF-DEFENSE","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.digitalnisebeobrana.cz\/penetracni-test-na-miru\/","og_locale":"en_US","og_type":"article","og_title":"Custom Penetration Test - DIGITAL SELF-DEFENSE","og_url":"https:\/\/www.digitalnisebeobrana.cz\/penetracni-test-na-miru\/","og_site_name":"DIGITAL SELF-DEFENSE","article_publisher":"https:\/\/www.facebook.com\/digitalnisebeobrana\/","article_modified_time":"2026-07-18T15:22:14+00:00","og_image":[{"width":1024,"height":768,"url":"https:\/\/www.digitalnisebeobrana.cz\/wp-content\/uploads\/2026\/07\/pentest2-1024x768.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_site":"@sodomak","twitter_misc":{"Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.digitalnisebeobrana.cz\/penetracni-test-na-miru\/","url":"https:\/\/www.digitalnisebeobrana.cz\/penetracni-test-na-miru\/","name":"Custom Penetration Test - DIGITAL SELF-DEFENSE","isPartOf":{"@id":"https:\/\/www.digitalnisebeobrana.cz\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.digitalnisebeobrana.cz\/penetracni-test-na-miru\/#primaryimage"},"image":{"@id":"https:\/\/www.digitalnisebeobrana.cz\/penetracni-test-na-miru\/#primaryimage"},"thumbnailUrl":"https:\/\/www.digitalnisebeobrana.cz\/wp-content\/uploads\/2026\/07\/pentest2.png","datePublished":"2026-07-18T14:33:24+00:00","dateModified":"2026-07-18T15:22:14+00:00","breadcrumb":{"@id":"https:\/\/www.digitalnisebeobrana.cz\/penetracni-test-na-miru\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.digitalnisebeobrana.cz\/penetracni-test-na-miru\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.digitalnisebeobrana.cz\/penetracni-test-na-miru\/#primaryimage","url":"https:\/\/www.digitalnisebeobrana.cz\/wp-content\/uploads\/2026\/07\/pentest2.png","contentUrl":"https:\/\/www.digitalnisebeobrana.cz\/wp-content\/uploads\/2026\/07\/pentest2.png","width":1448,"height":1086},{"@type":"BreadcrumbList","@id":"https:\/\/www.digitalnisebeobrana.cz\/penetracni-test-na-miru\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.digitalnisebeobrana.cz\/"},{"@type":"ListItem","position":2,"name":"Custom Penetration Test"}]},{"@type":"WebSite","@id":"https:\/\/www.digitalnisebeobrana.cz\/en\/#website","url":"https:\/\/www.digitalnisebeobrana.cz\/en\/","name":"DIGITAL SELF-DEFENSE","description":"","publisher":{"@id":"https:\/\/www.digitalnisebeobrana.cz\/en\/#\/schema\/person\/e932432719ebfc02a9b05e7b12047736"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.digitalnisebeobrana.cz\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/www.digitalnisebeobrana.cz\/en\/#\/schema\/person\/e932432719ebfc02a9b05e7b12047736","name":"Milan","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.digitalnisebeobrana.cz\/wp-content\/uploads\/2022\/01\/logo.png","url":"https:\/\/www.digitalnisebeobrana.cz\/wp-content\/uploads\/2022\/01\/logo.png","contentUrl":"https:\/\/www.digitalnisebeobrana.cz\/wp-content\/uploads\/2022\/01\/logo.png","width":613,"height":73,"caption":"Milan"},"logo":{"@id":"https:\/\/www.digitalnisebeobrana.cz\/wp-content\/uploads\/2022\/01\/logo.png"},"description":"Jmenuji se Milan P\u016flkr\u00e1bek, pamatuji si po\u010d\u00edta\u010de bez internetu, Internet bez Google a mobiln\u00ed komunikaci bez \u0161ifrov\u00e1n\u00ed. M\u00e1m za sebou v\u00edce ne\u017e dvacet let profesion\u00e1ln\u00ed praxe v IT, p\u0159edn\u00e1\u0161\u00edm a p\u00ed\u0161u \u010dl\u00e1nky o IT bezpe\u010dnosti, kryptom\u011bn\u00e1ch a nov\u00fdch technologi\u00edch. Od roku 2014 jsem sou\u010d\u00e1st\u00ed nezikov\u00e9 organizace Paraleln\u00ed Polis v Praze.","sameAs":["https:\/\/www.facebook.com\/digitalnisebeobrana\/","https:\/\/x.com\/sodomak"]}]}},"_links":{"self":[{"href":"https:\/\/www.digitalnisebeobrana.cz\/en\/wp-json\/wp\/v2\/pages\/7089","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.digitalnisebeobrana.cz\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.digitalnisebeobrana.cz\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.digitalnisebeobrana.cz\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.digitalnisebeobrana.cz\/en\/wp-json\/wp\/v2\/comments?post=7089"}],"version-history":[{"count":5,"href":"https:\/\/www.digitalnisebeobrana.cz\/en\/wp-json\/wp\/v2\/pages\/7089\/revisions"}],"predecessor-version":[{"id":7100,"href":"https:\/\/www.digitalnisebeobrana.cz\/en\/wp-json\/wp\/v2\/pages\/7089\/revisions\/7100"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.digitalnisebeobrana.cz\/en\/wp-json\/wp\/v2\/media\/7098"}],"wp:attachment":[{"href":"https:\/\/www.digitalnisebeobrana.cz\/en\/wp-json\/wp\/v2\/media?parent=7089"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}