Do any of you offer software to your pentest clients?
I thought that I had heard it's standard to charge the client for the licensing to use the tool. For example, if I were going to use Core Impact and I had the consultant edition, I would add in the charge for the 32-IP, 4-week (example) engagement license.
My thinking was that I would purchase, say Retina, use it for the engagement, and then turn it over to the client. Is something like this done often? Does anyone else have suggestions/recommendations or other comments regarding something like this?
Obviously the tool would be some sort of network/vulnerability scanner, whether it's ISS, Canvas, Retina, GFI, etc.
Thanks in advance

Bill