---
title: Can I Use Asset Priority To Change My Pen Test Queue?
description: This article explains how asset priority can determine the order in which penetration tests are executed. This is typically configured for enterprise customers to ensure that critical or new assets are tested first when capacity is limited.
---

[Skip to content](https://kb.edgescan.com/knowledge/can-i-use-asset-priority-to-change-my-pen-test-queue#main-content)

English

Show submenu for translations

[![Edgescan Cybersecurity Platform | EASM + RBVM + PTaaS](https://kb.edgescan.com/hs-fs/hubfs/Logos/23LOGOS-thicker/Edgescan-Logo-Black.png?width=200&height=40&name=Edgescan-Logo-Black.png)](https://www.edgescan.com/)

Open main navigation

Close main navigation

- English
  
  Show submenu for translations

 Search the Edgescan knowledge base

- There are no suggestions because the search field is empty.

1. [Help Center](https://kb.edgescan.com/knowledge?hsLang=en)
2. [Human PTaaS](https://kb.edgescan.com/knowledge/human-ptaas?hsLang=en)
3. [Scheduling PTaaS](https://kb.edgescan.com/knowledge/human-ptaas?hsLang=en#scheduling-ptaas)

# Can I Use Asset Priority To Change My Pen Test Queue?

## Asset priority can be used in many ways, this article explains how asset priority can be used to determine the order in which penetration tests are executed.

Version Number: v1.0.0

Published Date: 10 Dec 2025

\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_

This article explains how asset priority can determine the order in which penetration tests are executed. This is typically configured for enterprise customers to ensure that critical or new assets are tested first when capacity is limited.

#### **Example Priority System**

In this example, a customer performs around 50 penetration tests per month. Asset priority ensures that when multiple tests enter the workflow, the most important ones (P1) are completed first, followed by P2 and P3, so that critical or time-sensitive assets consistently receive priority.

| **Priority** | **Description** | **Example** |
| --- | --- | --- |
| P1 | Never tested and in production, or entering production within 1 month. | New live system |
| P2 | Has not had a penetration test in the previous 10 months, will fall out of compliance when it gets to 12 months no pentest. | Compliance is expiring |
| P3 | All other assets that require penetration testing | Non-critical, lower risk assets |

Pen tests are completed in the order **P1 → P2 → P3**.

#### **Queue Ordering Rules**

When assets enter the pentest queue, they are sorted by the following criteria, in order of precedence:

1. **Asset Priority**
2. **Type** – *Onboard → Renewal → Upgrade*
3. **Last Assessment Date** – oldest first
4. **License End Date** – closest expiry first\*

If multiple assets are identical across all factors, the next asset is selected at random.

**License End Date Exceptions**

\*Although license end date is normally the final sorting factor, **it can override all other rules if a license is close to expiry** to ensure testing is completed before the license lapses.

#### **Renewals vs. Onboards**

- **Renewals are not initially placed in the queue.** 
    - They are scheduled roughly at the same time as the previous year's pentest.
    - If a renewal encounters a blocker, it re-enters the queue and is ordered using the standard sorting rules.
- **Onboards (first-time tests) are prioritised above renewals.**
- **Upgrades** are treated as the lowest priority unless specifically requested or required due to licensing constraints.

#### **Notes**

- After onboarding, **asset priority must be maintained by the customer** within Edgescan.
- Licensing or scheduling limitations may occasionally require deviations from the standard ordering rules.
- Renewals that are delayed or blocked will re-enter the queue and follow normal prioritisation.

- [Getting Started](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#main-content)

    - [Quick Start](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#quick-start)
    - [Prerequisites & Network Requirements](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#prerequisites-network-requirements)
    - [Compliance Context](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#compliance-context)
- [Attack Surface Management](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#main-content)

    - [Concepts](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#concepts)
    - [Discovery Methods](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#discovery-methods)
    - [Asset Inventory](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#asset-inventory)
- [Vulnerability Scanning](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#main-content)

    - [Enabling & Disabling Scanning](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#enabling-disabling-scanning)
    - [Scope & Targeting](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#scope-targeting)
    - [Setting Authentication](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#setting-authentication)
    - [DAST Scanning](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#dast-scanning)
    - [API Settings](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#api-settings)
    - [Scanning Complex Workflows](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#scanning-complex-workflows)
    - [Vulnerability Risk Ratings](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#vulnerability-risk-ratings)
    - [Additional Configurations](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#additional-configurations)
- [Agentic PTaaS](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en#main-content)

    - [Overviews and Concepts](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en#overviews-and-concepts)
    - [Using Atomic](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en#using-atomic)
    - [Safety and Privacy](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en#safety-and-privacy)
- [Human PTaaS](https://kb.edgescan.com/knowledge/human-ptaas?hsLang=en#main-content)

    - [Concepts & Methodologies](https://kb.edgescan.com/knowledge/human-ptaas?hsLang=en#concepts-methodologies)
    - [Scheduling PTaaS](https://kb.edgescan.com/knowledge/human-ptaas?hsLang=en#scheduling-ptaas)
- [Platform Usage](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#main-content)

    - [Platform Navigation](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#platform-navigation)
    - [Asset Management](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#asset-management)
    - [Vulnerability Management](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#vulnerability-management)
    - [License Management](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#license-management)
    - [Credentials Vault](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#credentials-vault)
    - [Asset Blockers](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#asset-blockers)
    - [Reporting & Dashboards](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#reporting-dashboards)
    - [AI Insights](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#ai-insights)
    - [Compliance & Frameworks](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#compliance-frameworks)
    - [Additional License Details](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#additional-license-details)
- [Platform Automation](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#main-content)

    - [Notifications & Events](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#notifications-events)
    - [Internal/Private Testing](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#internal-private-testing)
    - [API & Authentication](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#api-authentication)
    - [Scheduled Exports](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#scheduled-exports)
    - [Cloud Platforms](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#cloud-platforms)
    - [CloudHook](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#cloudhook)
    - [ITSM & Ticketing](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#itsm-ticketing)
    - [SIEM & SOAR](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#siem-soar)
    - [CI/CD & DevOps](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#ci-cd-devops)
    - [Communication Automation](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#communication-automation)
    - [Other Automations](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#other-automations)
- [Organization Administration](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#main-content)

    - [Organization Setup](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#organization-setup)
    - [User Administration](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#user-administration)
    - [Roles Administration](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#roles-administration)
    - [Account Settings](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#account-settings)
    - [Organization Settings](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#organization-settings)
- [Updates & Announcements](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#main-content)

    - [2026 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2026-updates)
    - [2025 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2025-updates)
    - [2024 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2024-updates)
    - [2023 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2023-updates)
    - [API Changes](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#api-changes)
    - [OWASP API 2019](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#owasp-api-2019)

[![Chill listening crop-3](https://kb.edgescan.com/hs-fs/hubfs/Edgescan-blac-logo.webp?width=68&height=55&name=Edgescan-blac-logo.webp "Chill listening crop-3")](https://www.edgescan.com)

Copyright © 2026 Edgescan. All rights reserved.