5. HackerOne looks at all applicants and forms a pentest team, which consists of 3 pentesters and 1 pentest lead.

6. Once the pentest team is formed, pentesters have 33 hours to complete the pentest.

7. After testing has been completed, the lead pentester will draft and submit a summary report of their findings.

8. Once the vulnerabilities have been fixed, the pentest team will retest the vulnerabilities to make sure they're fixed.

Once the feature has been enabled for your program, to set up your pentests:

1. Go to the **Pentests** tab on your program page.

2. Click **Create pentest**.

3. Fill out these pentest details:

Field | Details

----- | --------

Name | The name of the pentest.

Industry | Select the industry the pentest is associated with.

Description | The description of the pentest.

Visibility | You can choose to have your pentest be: <li>Visible in the directory<li>Not visible in the directory <br><br> Pentesters won’t be able to see and apply to your pentest until it’s visible in the directory.

Slack workspace URL | Enter your slack workspace URL that’ll click a link to your pentest, and it’ll direct them to slack where they can be directed to. <br><br>You can leave this field empty so that no links will be shown to the pentesters.

4. Set the schedule for your pentest with these fields:

Field | Details

----- | -------

Scheduled dates | Choose the dates you want the pentest to begin and end.

Timezone | The timezone you want the pentest to begin at.

5. Set the contract for your pentest with these fields:

Field | Details

----- | -------

Hour cap (per pentester) | Set the maximum hour cap for every pentester. Each pentester’s hours are capped to prevent pentesters from taking advantage.

Lead pentester reward | Set the amount you want the lead pentester to receive.

Non-lead pentester reward | Set the reward amount for the non-lead pentester reward.

6. Click **Go to next step**.

7. Click **Create asset** to add assets to your pentest scope.

8. Select **+Add to scope** for the assets you want to add to your pentest scope in the **Add assets to pentest scope section**.

9. Select a **Preferred Methodology** for each asset. The methodology you choose will apply the appropriate pentest check for the asset. You can choose from:

<li> HackerOne Web Security Checklist

<li> HackerOne iOS Security Checklist

<li> HackerOne Android Security Checklist

<li> HackerOne Executable Security Checklist

10. Click **Save changes**.

Your new pentest will be listed on the **Pentests** tab of your security page.

4. Click **Edit pentest**.