My employer asked me to hack their new website.

I am in a bit of a pickle here, and I am intentionally being vague in some aspects. As background, I have pentest experience.

My employer, who is only one of the owners of the company, has asked me to perform a penetration test on their new website and report and vulnerabilities or issues. However, I am pretty sure I need some written agreement with a RoE and scope outlined as to not be liable for any damages. What is …

cybersecurity employer experience hack penetration penetration test pentest report test the company website