SECURITY REPORT

A report management can read and technical teams can act on.

Every finding should explain risk, confidence, useful evidence, remediation and retest status.

✓ Authorised scope✓ Bounded tests✓ Actionable report✓ Retesting

Two reading levels

Score, trend, top three risks, affected assets, urgency and action plan.

Endpoint, component, CVE/CWE/CVSS, sanitised evidence, confidence, remediation, reference and retest outcome.

SEV

Critical, high, medium, low or informational.

CONF

Confirmed, probable or indicative.

EXP

CVSS, exposure context and exploitation signals where available.

FIX

Concrete action, target version or recommended configuration.

HIST

First detected, last detected and status changes.

SRC

Several engines can confirm one finding without creating duplicates.