thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Foundational

Penetration Test Report

The final deliverable of a pen test, documenting methodology, findings, risk ratings, evidence and remediation recommendations.

Definition

A good report includes an executive summary for leadership, scope and methodology, detailed technical findings with reproduction steps and evidence, risk ratings, and prioritized remediation advice. It may include an attack narrative showing how findings chained together. Reports contain sensitive data and must be encrypted and distributed only to authorized recipients.

Example

A finding entry lists 'Stored XSS in comment field, CVSS 7.1, screenshot of payload execution, recommended fix: context-aware output encoding.'

Exam tip

Expect questions on audience: executive summary for management, technical findings for engineers, and secure handling of the report itself.

Related terms