What's in a Pentest Report
Here’s what can you expect in a Pentest Report.
Our pentesters share what they’ve found before they write your report. We’ll write a report for pentests with at least eight (8) credits .
Now that you’ve done all the work needed to set up a pentest, you might be anxious for results. Here’s what you can expect:
Once you’ve finished setting up a pentest, select Pentests in the left-hand pane. You should see your pentest listed, with an In Review label.
Select your pentest. You should see a link to a Slack channel, dedicated for your pentest.
Add the colleagues of your choice to the Slack channel. Choose colleagues who can benefit from direct communication with our pentesters.
We’ll select the best available testers before the start of the pentest. The time we need depends on your PtaaS Tier and any special requirements you have.
You may get questions from your pentesters in Slack. You can also elaborate on your requirements in that same channel.
As our pentesters analyze your asset, they’ll add updates frequently in your Slack channel. If they discover vulnerabilities (“findings”), you can start remediating before the pentest is complete.
Here’s an example finding as discussed in a Slack pentest channel.
Once the pentest is complete, we move your pentest from Planned to Remediation.
You can start assessing all discovered vulnerabilities. In the Cobalt app, navigate to Pentests. Select your pentest, and navigate to the Findings tab.
Scroll down until you see Activity. Depending on your assessment, you can set the finding to one of the following states:
We keep the Slack channel open until you’ve set each finding to:
If you need access to the archived channel, contact your Customer Success Manager or support@cobalt.io.
If you’ve purchased a qualifying PtaaS Tier, you can customize your Pentest report. However, we report all findings. For more information, see the following blog post on how you can Customize Your Pentest Reports.
Based on your Service Level Agreement, our pentesters then share a formal report. You’re welcome to download this sample test report (PDF) for a web app.
Our Pentest States page includes more information about each pentest state, including Draft, In Review, Planned, Remediation, and Closed.
Here’s what can you expect in a Pentest Report.