Begin with the executive summary
A report generated in the client portal opens with engagement details and an executive summary written by your testing team. It records the authorised scope version and testing type.
Understand the priorities
The remediation overview groups findings by severity, from Critical to Informational. Critical and High findings are marked for immediate review. Read the business impact alongside the severity to understand each issue.
Work through the findings
Each finding is headed by its reference (such as F-01), the same in the client portal, and includes affected assets, a description, impact, reproduction steps, any evidence notes and remediation guidance. Where recorded, it also gives when the issue was observed, the HTTP request and response, and references such as CWE or OWASP. A CVSS score appears where one applies. Findings are reviewed before publication.
Keep the portal close
Supporting evidence files and retest results remain in the client portal rather than the generated PDF. Once released, retest results and any finding found in a retest are also published in a report update beside the report. Use the engagement record to track the next steps and communicate with your testing team.