At the end of your pentest campaign, generate an audit report to share information about vulnerabilities found during the campaign, either internally with key stakeholders (e.g., for board reporting) or externally to regulators.
The audit report is the deliverable used for reporting and governance. It provides an executive summary of the campaign: the scope actually tested, the security posture observed, the key risks identified, and the priority recommendations.
What is included in the Audit Report?
An audit report is a summary of a pentest campaign that includes:
A customised description of the pentest campaign, and a synthesis of the findings
Key information about your pentest campaign:
Scope
Testing approach - black-box or grey-box -
Distribution of vulnerabilities
Detailed reports (e.g., status, type, description, metadatas)
How to generate an Audit report?
Go to the “Admin Panel”
Select a Pentest campaign
Click on “Audit reports” in the left-side menu
Click on “Generate an audit report”
Fill in the “Description & Goals” and “Synthesis of Findings” sections
Click on “Generate audit report”
Now upload your audit report from the “Previous Audit report” list.
