Reports and certificates

Open Reports in the sidebar. Every pentest has two documents, and you can generate them on demand once the run completes.

Report	For	Contents
Attestation Summary	Stakeholders and auditors	1 to 2 pages, posture first, safe to share.
Detailed Report	Your security team	Full findings, evidence, narrative and audit trail.

Download a report

1. Open Reports. Reports are grouped by app, with search and filters.
2. Find the run. Reports show Not started until you generate them.
3. Choose the report type and click Generate. This can take a few minutes.
4. When it shows Ready, click Download for the PDF, or View to read it in the report viewer.

Each report shows the date it was generated ("as of"). After you retest findings, click Regenerate to reflect the latest results. You can also reach a run's report from the run page under Report & certificates.

Public certificate

A certificate is a signed, public PDF that proves a pentest was performed. Each one has a unique verify URL that anyone can open, and you can revoke it at any time.

1. In Reports, click Issue certificate and select a completed run.
2. Check the preview of what reviewers will see, then click Issue certificate.
3. Download the certificate PDF from its card.

A certificate has one of three states:

• In progress: issued, with critical or high findings still under remediation. It is not public yet.
• Attested: public and verifiable once the critical and high findings are fixed.
• Revoked: withdrawn.

A certificate reflects the security posture at the time of its pentest. A later pentest does not change an earlier certificate.

---

Success checklist

• The report generates without errors and shows Ready.
• The PDF downloads at the level you chose.