A free starting point for authorised web security research. Before adding more tools, make the permission boundary and the report clear.

Inside the download

• Scope & Report Field Kit PDF
• Editable permission card, hypothesis sheet and vulnerability report outline
• Fictional Aster request/response files, a redaction exercise and answer key
• Submit, pause and stop checklists

Learn to separate an observation from a demonstrated finding. Review account context, expected versus actual behaviour, evidence and limitations before submitting anything.

Free. No software installation required. Read the PDF and edit the Markdown/text worksheets with ordinary desktop tools. These are offline learning files, not a live hacking lab.

Want the next step? Foundations is the beginner guide. Practitioner develops controlled comparisons. Proof Desk Professional includes the local app and every guide.

Authorised research only. No testing permission, certification, accepted-report or earnings guarantee.