Practical guides, interactive security labs, and downloadable tools built to help teams understand testing, findings, scoping, and remediation.
Whether you are preparing for an assessment or trying to make sense of a finding in a report, start with the section that matches what you need.
Use these guides when you are evaluating a provider, defining scope, or trying to get the right people and information lined up before testing begins.
Questions and evaluation criteria for comparing penetration testing providers beyond methodology language and tool lists.
Read the guide Assessment PlanningUnderstand the information needed to scope penetration testing and security assessments, then complete the questionnaire online or download it for internal review.
Start scopingInteractive tools and guided demos that make common web security controls easier to understand, reproduce, and discuss with developers or stakeholders.
Review common HTTP security headers, see the values the application returns, and identify protections that appear present, missing, or worth a closer look.
Check security headers Guide + Interactive TesterUnderstand how clickjacking works, check whether a page can be framed by another site, and review browser framing protections such as CSP and X-Frame-Options.
Explore clickjacking Guide + Interactive LabA plain-English walkthrough of Cross-Origin Resource Sharing (CORS), including controlled demos, a GET-based browser test, and practical remediation guidance.
Explore CORSDownloadable worksheets and questionnaires for vendor evaluation, internal coordination, and assessment planning.
A structured interview and scoring tool for comparing penetration testing providers across technical depth, staffing, communication, reporting, and program maturity.
Download PDFAn offline version of the scoping questionnaire for teams that want to gather details internally before sending the information back to KobReySec.
Download PDFIf a guide or lab raised more questions than it answered, that is usually a good reason to talk through the actual environment, finding, or assessment objective.