Pentest Findings Report

Convert raw authorized engagement findings into a structured, client-ready penetration test report aligned to PTES and OWASP Testing Guide documentation standards.

Flow

Phase 1 — Engagement Metadata

Ask for and record:

• Engagement name and reference number
• Client organization and primary contact
• Scope: in-scope assets (IP ranges, domains, applications, physical locations)
• Explicitly out-of-scope assets
• Rules of engagement summary
• Testing window (start and end dates)
• Testing team (lead tester, testers, reviewer)
• Report classification level (Confidential / Restricted)

Phase 2 — Executive Summary Inputs