Where a pentest tests a specific part of the ICT infrastructure within organizations, the demand for a company-wide security test is increasing. A scenario-based pentest has a larger (organization-wide) scope and different goals, namely: how resilient and/or mature is the organization to defend itself against certain threats. And preferably a test that approaches the reality of a cyber attack as closely as possible, so that the result of the test optimizes the security for this scenario. To meet this demand, Securify has developed the Scenario Based Pentest. Since companies do not need to have a SOC and a blue team as with a Red Teaming exercise, a Scenario Based Pentest is suitable for most organizations.