The Art of Network Penetration Testing

12 Writing a solid pentest deliverable

This chapter covers

• The eight components of a pentest deliverable
• Closing thoughts

The final piece of the puzzle that you need to create is your engagement report—or, as it’s more commonly referred to in the industry, your deliverable. In this chapter, I go over all the components that make up a solid pentest deliverable. There are eight of them, and I explain the purpose of each section and what it should contain. Appendix D is an example of a complete standalone INTP deliverable, which I would present to Capsulecorp if it had been a real company that hired me to perform a pentest engagement. You can and should feel free to use this example report as a template or framework when creating your own deliverables. ...