Skip to main content

Sanitized Report Outline Example

Executive Summary​

Describe the risk, affected class of system, and remediation state in plain technical language.

Scope​

State what was reviewed and the authorization basis. Avoid implying authorization beyond the reviewed context.

Findings​

Group findings by class. For each finding, include impact, affected conditions, and remediation status.

Evidence Handling​

Summarize evidence type and review method. Do not include raw secrets, credentials, private customer data, or exploit-ready chains.

Limitations​

State what was not tested and what remains unknown.