Collection of assets to be tested or used during a pentest
List of actors that interact with the system
List of documents providing context for testing
List of web application endpoints to test
List of integrated code repositories
List of source code repositories for static analysis