Report Generation Technique

Goal: produce professional penetration test reports that meet industry standards and satisfy both technical and executive audiences.

When this technique applies

• Need to compile pentest findings into a structured report.
• Writing executive summaries or detailed technical findings.
• Creating attack narratives or remediation guidance.
• Preparing a single-finding submission under a bug-bounty or VDP program.

Initial triage

Before writing, classify the deliverable and the evidence maturity so the report structure matches the engagement outcome.