Request Forms make it easy for clients to request new projects, repeat tests, or retests of remediated vulnerabilities. Once you enable the feature and set up the forms, your clients can ask you for repeat or new work with a few clicks, saving you time and money on setting up new projects. That's helpful whether you offer retesting, pentest-as-a-service, or just want to improve customer lifetime value by making it easier for clients to send you new work.
How it Works
1. The Client clicks Request a Pentest.
2. The Client fills out the form you set up.
3. You receive a notification and can approve/decline the request.
4. The pentest is moved into scheduled pentests if approved.
Here, the form you set up links to the pentest project, scope, and other details, so you can collect everything you need to quote the project request and start work.
Tip! Project Requests show up under the Pentest Pipeline as Requested. You can see Requested projects at any time from the Pipeline dashboard.
To view Requested projects, go to Pentests, click Status, and select Requested.
Set Up a Request Form
1. Click Settings in the Cyver Core menu.
2. Select Request Forms.
3. Click + New Request Form.
4. Name the Form.
5. Describe the Form.
6. Select Group (if any).
7. Click Next.
That's it, you have a new form. The next step is to edit your form with your own questions and details.
Tip! Once forms are published, they show up to clients as an option when they click Request a Pentest. You can add as many forms as you want to offer more options to the client.
Edit a Request Form
You can edit a Request Form at any time to change, edit, or add new questions. All forms are initially created with a set of system questions. You can hide these and add your own questions, use these as-is, or use your own questions.
1. From the Request Forms page, select the Form you'd like to edit and click ... under the Actions column and hit Edit.
2. Link a Pentest Template from your library. This will automatically set up that pentest or project when the form is completed.
3. Click Form Fields from the Form menu. Your form comes with 7 system default questions:
- When would you like to start
- Pentest repetition frequency
- Objectives
- Type of Testing
- Details
- Instructions to access assets
- Credentials
In addition, you can add up to 25 additional questions:
- 5 Dropdown
- 5 Short text
- 5 Multitext
- 5 Multi-select
- 5 Date/Time
These are fully customizable and can be edited at any time.
Adjust Form Fields
From the Form Fields menu:
1. Click on the question you'd like to edit.
2. Set Display Title.
3. Set Description.
4. Enable the Visibility toggle if you'd like this question to show up on the client form. Simply uncheck this box if you'd like to hide the question from the form at any time.
6. Edit the options or add new options.
7. To change the display order of the questions in the questionnaire, simply drag and drop them. This determines in what order questions display in the form. You can change this at any time.
8. Click Save.
Setting Client Form Notifications
From the form you'd like to edit:
1. Go to Notifications.
2. Choose to Alert all Manager users or all Client Account Manager users. E.g., alert the Client Account Manager if work needs to be approved and quoted before proceeding.
Set Managers in Roles and set Client Account Managers from the Client Overview dashboard. Learn how to set up clients here.
Planning
1. Go to Planning.
2. Enable Activate planning portal availability toggle.
3. Set availability for this request type based on how busy pentester teams are. The planning form shows availability based on the number of pentests or projects in the schedule for the pentest team linked in the pentest template. You can change these numbers based on preference. E.g., set Available at 0 if you prefer that pentesters not run more than 2 pentests at once.
4. Set days per status.
5. Make sure you hit Save.
Activate Request a Pentest for Clients
Once you have Client Request Forms set up, you can begin activating the "Request a Pentest" button for clients. Here, you individually enable the function and align settings per client.
1. From the Dashbord, go to Clients on the menu.
2. Select the client you'd like to edit.
3. Navigate to the Client Portal from the Client Tab.
4. Scroll Down to Request Pentest button and slide the toggle to on. It will turn Green. If your Request Form is for Continuous Assessments, scroll to the bottom of the page and use the Request Continuous Assessment button instead.
5. Click Select Request Form. Choose one or more of the available forms. You can add as many as you like.
6. Click Save.
The client can now click "Request a Pentest" and then select whether they want to retest an existing pentest or start a new one. Your Request Forms will show up as options under starting a new pentest.
That will look like this:
Next Steps
Request Forms allow clients to seamlessly request pentests and continuous assessments inside the platform. With the Quote Add-on, you can integrate credits, meaning clients can pre-pay for cybersecurity services, receive proposals and invoices directly in the platform, and pre-approve budgets so that pentest requests move into the hands of the stakeholders who need them.