Project & Pentest Status Workflow Guide

A project may contain one or more Pentests, and while the project follows an overall engagement lifecycle, each Pentest follows its own testing workflow in parallel.

This section gives you a quick visual reference for both.

Project Lifecycle

Status	At this stage	Your action
Quote Requested	Your quote request has been received The Red Sentry team reviews the details. Intake questions may be prepared if clarification is needed.	None
Intake Questions	Intake questionnaires are shared for each Pentest in the project.	Answer intake questions so we can scope and price your engagement.
Quote Building	The quote and Statement of Work (SOW) are being prepared.	None
Customer Review	Your quote and SOW or requested changes, are ready for review	Review the quote and SOW. Request changes if needed, or sign the SOW to proceed.
Change Requested	Requested changes are being reviewed.	None
Awaiting Payment		Make a payment if due now so preparations can begin.
Preparing	Preparation begins for testing activities. Pentests move into their preparation stage. Access information may be requested.	Complete access questions. Respond to any clarification if requested.
Testing Underway	Testing is active within one or more Pentests. Early findings may be shared if critical.	You will receive email notifications for messages or early findings.
Testing Completed	Findings are available in the platform Reports and attestation can be downloaded. Remediation testing can be requested whenever fixes are ready.	View findings and export to Jira if needed. Download reports. Request remediation within 90 days if needed
Remediation Testing	One or more Pentests are in Remediation testing.	Watch for Email notifications about messages and updates.
Closed	Project is closed.	None — reports remain available for reference.

Pentest Workflow

Status	At this stage	Your action
Preparing	The Red Sentry team reviews the scope and prepares required access questions.	None
Access Information	Access questions are added to collect credentials, whitelisting, test accounts, URLs, environments, etc.	Provide access information so testing can start
Scheduled	Your Pentest is scheduled, and assigned testers will begin on the scheduled start date.	Ensure required systems remain accessible.
In Progress	Testers perform assessment activities. Clarifications may be requested if needed. Critical findings may be shared early.	You will receive email notifications for messages or early findings. Respond when clarification is needed.
Completed	Findings become visible in the platform. Final report and attestation become available. Jira sharing is available (if configured). You may request remediation testing when ready.	Review findings. Download report and attestation Request remediation within 90 days if needed.

Once the reported findings has been remediated, you can request remediation testing.

To request a remediation testing for a Pentest, you must ensure

you are within 90 days of previous test delivered.
All testing credentials and URLs have been verified and are active.
Previously reported findings have been remediated in the environments and are ready for testing.

Status	At this stage	Your action
Remediation Requested	Your request has been received. The Red Sentry team reviews and schedules remediation testing.	None
Remediation Scheduled	Remediation testing dates are scheduled.	Ensure access remains available during the scheduled window.
Remediation Underway	Testers verify fixes for previously reported findings.	You will receive Email notifications for messages. Respond if any clarification is requested.
Remediation Completed	Findings statuses are updated (remediated, not remediated, mitigated, etc.). Remediation report becomes available.	Review updated remediation results. Download the remediation report.

Project & Pentest Status Workflow Guide

Quick guide to understand Project and Pentest workflow

Project Lifecycle

Pentest Workflow