The Business of Hacking: Creating, Developing, and Maintaining an Effective Penetration Testing Team

© The Author(s), under exclusive license to APress Media, LLC, part of Springer Nature 2024

M. Butler, J. G. OakleyThe Business of Hackinghttps://doi.org/10.1007/979-8-8688-0174-7_12

12. Reporting

Michael Butler¹   and Jacob G. Oakley²

(1)

Falls Church, VA, USA

(2)

Owens Cross Roads, AL, USA

 

An assessment is only as good as its report. The report is your final opportunity to communicate the value that your team produced for the client. Most of the reports I have seen from other teams use an internally developed format to communicate the number and severity of findings as quickly and directly as possible. Tech professionals don’t like writing reports and it shows.

The first time a penetration tester creates a pentest report, they will typically download ...