Not necessarily. We can test with no access (black box), partial access (grey box), or full access to source code (white box). Grey and white box testing often uncover more, and we’ll help you choose the right approach during scoping.