FREE TO USE / NO SIGNUP

Make your next security review concrete.

Original checklists, test cases, and worksheets from Ceron. Define what should happen, record what actually happens, and keep the evidence your team needs to act.

01 / AI AGENTS

AI Security Assessment Checklist: 12 Tests for Agents and Connected Tools

For teams defining tests for connected AI tools, retrieval, permissions, approvals, and data boundaries.

Plan an AI security assessment with 12 repeatable tests for agent permissions, prompt injection, tenant data, approvals, and evidence. Includes a free worksheet.

Download the AI assessment worksheet ↓Editable plain text. Twelve test cases, evidence fields, and a completed synthetic example. No signup.

Open the 12-case spreadsheet CSV ↓Import into Excel, Google Sheets, or your test tracker. Includes result, owner, evidence, and retest columns.

Read the instructions and worked cases →

02 / SAAS AUTHORIZATION

SaaS Tenant Isolation Test Matrix: 18 Authorization Cases With Evidence

For engineering teams comparing allowed and denied behavior across tenants, roles, APIs, exports, and integrations.

Test SaaS tenant isolation with 18 positive and negative authorization cases for APIs, exports, invites, caches, webhooks, and support access. Free worksheet.

Download the tenant-isolation worksheet ↓Editable plain text. Eighteen cases, test identities, and evidence and retest fields. No signup.

Open the 18-case spreadsheet CSV ↓Positive and negative controls with editable endpoint, result, owner, evidence, and retest columns.

Read the instructions and worked cases →

03 / ASSESSMENT PLANNING

Penetration Testing Scope Template: Assets, Access, Evidence, and Stop Conditions

For buyers and testers agreeing on assets, access, exclusions, stop conditions, evidence handling, and deliverables.

Use this free penetration testing scope template to define assets, roles, exclusions, stop conditions, evidence handling, deliverables, and retesting.

Download the pentest scope template ↓Editable plain text. Fourteen planning fields, an asset-register layout, and a readiness review. No signup.

Open the scope planning CSV ↓Fourteen fields with space for agreed details, an owner, and unresolved decisions.

Read the instructions and worked cases →

04 / PUBLIC WEBSITE CHECK

See what your public response exposes.

The free Ceron checker inspects security headers, cookie attributes, CORS, and HTTPS behavior. It shows response evidence and practical fixes. It does not log into your application or test customer permissions.

Open the free website security checker →

Use the resources with a defined scope.

These are planning aids and illustrative test cases, not certifications or customer findings. Use synthetic data and test only systems you are authorized to assess. Record untested areas as coverage gaps rather than assuming they passed.

Created by Mario Luckeneder, founder of Ceron. Each guide includes the context needed to adapt its worksheet. Links to the original guide help colleagues find that context when a worksheet is shared.

Need an assessment? Compare Ceron’s services →