Testing
Black box testing
Also called: black-box penetration test, zero knowledge testing
Black box testing is a penetration test performed with no information about the target beyond what is publicly available, simulating an external attacker who starts from nothing.
It answers a narrow question well: what can an uninformed outsider reach. It answers coverage badly, because a fixed engagement spends much of its time on discovery that a real attacker would spend months on.
Testing, with the report an auditor can actually use
A fixed price, a date, and a report that states scope, method and closure. No discovery call required to get a number.