Vulnerability Assessment Agreement
Contract for systematic review of security weaknesses.
Detailed Explanation
Unlike a penetration test which exploits flaws, a Vulnerability Assessment Agreement covers the systematic scanning and identification of security weaknesses. It defines the tools to be used, the systems to be scanned, and the reporting requirements.