Working with engagements

TrekShield engagement managers create engagements and set the schedule. As a customer you review scope, supply what testers need, and follow progress. To start a new engagement, talk to your TrekShield engagement manager or contact us.

Open Engagements in the sidebar, then choose an engagement. Tabs appear as the work progresses (lifecycle).

Tab	Shows	Appears from
Overview	Status, dates, summary metrics	Scoping
Scope	In-scope assets, out-of-scope items, rules of engagement, test credentials	Scoping
Attachments	Shared documents	Scoping
Team	People assigned	Scoping
Discussion	Comments with the TrekShield team	Scoping
Findings	Findings released to you	Delivered
Remediation	Fix progress	Delivered
Reports	Published reports	Reporting, once published

Review and approve scope

On the Scope tab, check that every target you expect is listed as in scope, that exclusions are right, and that the rules of engagement match your constraints, such as testing windows or systems to avoid. You cannot edit scope yourself; ask your engagement manager to change it.

When it is correct, a Client Administrator selects Approve Scope and confirms. Approval needs at least one asset in scope. If scope is edited while the engagement is still in Scoping, the approval resets and must be repeated. The engagement cannot move to Scheduled without it.

Test credentials

If testers need accounts, send them to your engagement manager, who records them in the Test Credentials section. Passwords and secrets are encrypted when stored and are never shown again; the page displays only the service name, username and notes. Provide least-privilege accounts created for the test, and rotate them afterwards.

Attachments

Use Attachments for letters of authorization, scope documents and similar files. Client Administrators can upload and delete attachments, up to 25 MB per file.

Discussion

Client Administrators can comment here; comments are shared with the TrekShield team. Notes the team marks as internal are never shown to you. Use @mentions to notify a colleague.

Notifications

You are notified when an engagement is delivered or completed, and when it is cancelled. Findings are not visible until delivery, so you will not see work in progress.

Next: findings and evidence.