Penetration Testing Authorization Agreement
Cybrium will not execute an offensive action — scan or campaign — without a signed, liveness-verified authorization on file. The agreement modal appears at the end of the launch wizard and must be completed by a person with the legal authority to authorize testing on the in-scope assets.
Every network scan and every adversary campaign must pass this gate. No exceptions.
Authorizer Information
The modal collects the authorizer's full legal name, organizational title, email address, and a contact phone number. The email and phone are cross-checked against the tenant's user directory — an authorizer must either be a Tenant Admin or hold the Authorize Testing platform role. If the identifier does not match a known user, the form blocks submission.
Test Types
The second section enumerates the offensive categories the campaign is allowed to perform: network discovery, web application testing, credential testing, exploitation, persistence, and data access simulation. Each category has a checkbox and a brief plain-English description. Unchecked categories are hard-disabled in the planner for the duration of the campaign — the AI cannot override them, even if a better path would require one.
Signature
A signature pad captures the authorizer's handwritten signature as a vector path. The signature is bundled with the signed document, hashed, and anchored to the tenant's audit log. A printable PDF is archived alongside.
Liveness Capture
Signatures alone are not enough — Cybrium requires proof that a live human signed in real time. The liveness step captures:
- A short selfie video from the browser webcam, or
- A mobile-handoff capture via QR code, which opens a one-time page on the authorizer's phone and uploads the video back to the session.
A device fingerprint (user agent, screen dimensions, approximate geolocation) is recorded with the capture. The capture is optional on Starter plans for scans, but mandatory for every adversary campaign on every plan. Face matching against a stored reference is performed for repeat authorizers.
The signed agreement, the signature path, the liveness video, and the fingerprint are packaged into an evidence bundle that survives tenant deletion for seven years.