Penetration Testing and Security Assessment Agreement — Long Form (Counterparty Side)
A long-form, counterparty-favorable Penetration Testing and Security Assessment Agreement that authorizes security testing with a scope, safe harbor, and disclosure terms that protect both sides.
Every allocation of risk is made deliberately in your favor, with the reasoning noted for the negotiation. The complete protective provision set for a transaction where the downside justifies negotiating every term.
Frequently asked questions
The fee covers the finished document, filing-ready or send-ready as applicable, the supporting exhibits or attachments described in the scope, and a short cover memorandum explaining the choices made. It is fixed at this scope: one engagement. 2 rounds of revisions are included. If your matter falls outside that scope we tell you before starting and quote the difference — we do not bill past a flat fee without agreeing it first.
1 to 2 weeks from a complete set of instructions, plus time for the 2 rounds of revisions included in the fee. If you are working to a court deadline or a closing date, tell us when you order and we will confirm in writing whether we can meet it before you commit.
$4,075 is $325/hour × 12.5 hours — the time this deliverable takes in an ordinary security matter, at the firm's standard rate. Because it is a flat fee, the risk of the work running long sits with the firm: you pay $4,075 whether it takes us the estimate or twice it.
Third-party costs are never inside a flat fee and are passed through at cost, never marked up: court and agency filing fees, court reporter and transcript charges, expert witness fees, search vendor and e-discovery hosting charges, process server fees, and travel.
The business terms you have agreed so far, the counterparty and which side of the deal you are on, any existing draft, term sheet, or prior agreement, and your risk tolerance on the provisions that matter most to you. Send what you have — if something is missing we will tell you what else we need before the turnaround clock starts.
Clients also order
Other Security work MC Law prepares on a flat fee.
Penetration Testing and Security Assessment Agreement — Long Form (Company Side)
A long-form, company-favorable Penetration Testing and Security Assessment Agreement that authorizes security testing with a scope, safe harbor, and disclosure terms that protect both sides.
Information Security Addendum and Vendor Security Requirements (Long Form)
A long-form Information Security Addendum and Vendor Security Requirements that attaches concrete security controls to a contract instead of a vague promise of industry standards, built for a high-value or heavily negotiated transaction.
Penetration Testing and Security Assessment Agreement — Negotiation and Closing (Company Side)
Full company-side negotiation of a Penetration Testing and Security Assessment Agreement, the document that authorizes security testing with a scope, safe harbor, and disclosure terms that protect both sides, from first draft to closing.
Penetration Testing and Security Assessment Agreement — Negotiation and Closing (Counterparty Side)
Drafting and negotiation of a Penetration Testing and Security Assessment Agreement on behalf of the counterparty, through to signature.
Incident Response Plan and Breach Notification Playbook
A custom-drafted Incident Response Plan and Breach Notification Playbook that gives you a rehearsed sequence and pre-drafted notices for the day something actually goes wrong.
Information Security Addendum and Vendor Security Requirements — Template and Playbook
A reusable Information Security Addendum and Vendor Security Requirements template plus a negotiation playbook, for the document that attaches concrete security controls to a contract instead of a vague promise of industry standards.