Michael,

I think your formula is not 100% perfect as you are probably already aware.

I have tried for years to based pentest quotes on IPs and services
available, but this does not work. The reason is because some clients
rarely know the services that are running on the systems or what IPs are
al...

[ more ]