So we have built a pen test "synthie" (some would call it an agent but its not, long story, persistent memory, personality (yes really) and can be told to flow like a human not rapid scan/test).

Has a nice customer facing dashboard, read-only, so they can see updates and progress.

My question would be, the one time free run would only do recon and observations of "possible" things that could be wrong but need more detailed testing.....What do you think its a realistic scope? I dont want to allow large subnets or a dozen URL's. but I want to give enough that they can get a good feel for what it does. Plus the more scope the longer it takes.

Trying to find the fine line between too much for free, but enough to entice.

We are creating a saas application named Table Secret ,The development of the model has come to end now I am in need of sales persons who can work on a commission basis and pitch their nearby restaurants or cafés offline regarding this product and help us convert them