Findings & Reporting

The findings and reporting workflow is where teams document vulnerabilities, collaborate on remediation details, and generate client-ready deliverables.

Finding Management

The findings module allows teams to document security vulnerabilities:

  • Severity Levels: Critical, High, Medium, Low, Informational
  • Affected Hosts: Track which systems are impacted
  • Rich Content: Description, impact, recommendations, and remediation steps
  • Export Options: Individual or bulk export to HTML/PDF
  • Customizable Sections: Configure which sections appear in findings

Adding Findings

  1. Select a session from the Sessions list
  2. Click on Findings in the session details
  3. Click + New Finding
  4. Fill in finding details:
  5. Title and severity level
  6. Affected hosts
  7. Description and impact
  8. Recommendations and remediation
  9. Save the finding

Reporting & Export

  • PDF Report Generation: Professional penetration testing reports using QuestPDF
  • HTML Export: Export findings and data in HTML format
  • Customizable Templates: Configure finding sections and report structure
  • Bulk Export: Export all findings from a session at once

Report Generation

Professional report creation for deliverables:

  • PDF Generation: High-quality PDF reports using QuestPDF library
  • HTML Export: Web-friendly export format
  • Customizable Templates: Configure report sections and structure
  • Finding Sections: Executive summary, technical details, recommendations, etc.
  • Bulk Export: Export all findings from a session in one operation

Generating Reports

  1. Navigate to Findings for a session
  2. Click Export Findings dropdown
  3. Choose export format:
  4. HTML: Web-friendly format
  5. PDF: Professional report document
  6. Report will be generated and downloaded

Importing Existing Reports

You can bring findings in from an existing report file instead of typing them by hand. The Report Imports workflow parses an uploaded report and lets you review what will be created before anything is added to the session.

  1. Open a session and choose Import Report.
  2. Upload the report file (or select a file already uploaded to the session).
  3. On the Preview screen, review the findings and data the server extracted.
  4. Confirm to create the findings in the session.

Because you preview first, you stay in control of exactly which items are imported.

Report Templates

Report templates control the structure and content of your generated deliverables. Templates are managed from the Admin area.

  • Report Templates — create, edit, and delete templates that define which sections a report contains and how it is laid out.
  • Custom Report Sections — add your own sections (beyond the built-in ones) and remove sections you don't need.
  • Report AI Skills — configure the AI prompts/skills used to help draft report content.
  • Word Report Templates — upload .docx templates for Word-format output, set a default, and download or remove them.

Configure your template once and reuse it across engagements so every deliverable matches your house format. See Administration for where these live, and Finding Sections Configuration for tuning the sections that appear inside individual findings.