Create a penetration testing assessment request

task australia Updated Sep 10, 2026 1 min read create-new-pen-test-assesment-req.md

Initiate a penetration test assessment request for your web applications, mobile applications, or APIs. These requests are submitted to the ethical hacking team, who then proceed to test these applications and manually report the penetration test findings.

Before you begin

Role required: Application Owner

Procedure

Navigate to Workspaces > Penetration Test Workspace.
On the Penetration Testing Assessment Request form, fill in the fields.
Select Submit.

An email notification is sent to the ethical hacking team that the request has been created for the relevant application.
Once the form is submitted, the ethical hacking team can Start Scoping.
Post scoping, the application owner prepares the test environment and the ethical hacking team can Start testing.
In case you must verify the details in the request from, you can mark the testing phase on hold by selecting the Put on hold button.
Once the testing is complete, you can view the AVITs under the Penetration Testing Test findings tab.

Note: You can duplicate a request from an existing request. Once duplicated, the AVITs attached to the parent request are moved (not copied) to the duplicated request.

44 lines · 2.1 KB Wrap lines

---
title: Create a penetration testing assessment request
description: Initiate a penetration test assessment request for your web applications, mobile applications, or APIs. These requests are submitted to the ethical hacking team, who then proceed to test these applications and manually report the penetration test findings.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/application-vulnerability-response/create-new-pen-test-assesment-req.html
release: australia
product: Application Vulnerability Response
classification: application-vulnerability-response
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Penetration Test Workspace, Use, Application Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Create a penetration testing assessment request

## Before you begin

Role required: Application Owner

## Procedure

1. Navigate to **Workspaces** &gt; **Penetration Test Workspace**.

2. On the **Penetration Testing Assessment Request** form, fill in the fields.

3. Select **Submit**.

An email notification is sent to the ethical hacking team that the request has been created for the relevant application.

4. Once the form is submitted, the ethical hacking team can **Start Scoping**.

5. Post scoping, the application owner prepares the test environment and the ethical hacking team can **Start testing**.

6. In case you must verify the details in the request from, you can mark the testing phase on hold by selecting the **Put on hold** button.

7. Once the testing is complete, you can view the AVITs under the Penetration Testing Test findings tab.

**Note:** You can duplicate a request from an existing request. Once duplicated, the AVITs attached to the parent request are moved \(not copied\) to the duplicated request.