Report documents

Choose the document that fits your audience, per run, on the Reports page or the run page:

• Attestation Summary: a 1-2 page posture summary you can share with stakeholders and auditors. It contains no proof-of-concept or detailed evidence.
• Detailed Report: the working document for security teams and developers, with findings, evidence and remediation guidance.

You can regenerate a report to reflect your latest findings and re-test results.

Certificates

Each completed pentest can have a public certificate with a unique verify URL that proves the pentest was performed. A certificate shows the security posture at the time of that pentest, and a later pentest does not change an earlier certificate. You can revoke a certificate at any time.

Older names

Reports created earlier may be labelled Executive or Audit. These are the same documents as the Attestation Summary and the Detailed Report.