Report Structure
Executive and technical sections.
Why Structure Matters
A penetration test is only as valuable as the report it produces. The findings live in your head and tools until you write them down clearly.
A well-structured report serves two very different audiences: executives who decide on budget and risk, and engineers who actually fix the issues.
- Executives need the big picture.
- Engineers need exact technical detail.
The Two-Audience Problem
If you write one long technical document, executives will not read it. If you write only high-level summaries, engineers cannot act on it.
The solution is a report split into layers: an executive summary up front, then progressively deeper technical sections. Each reader stops where their need ends.
All lessons in this course
- Report Structure
- Risk Scoring
- Writing Findings
- Remediation Guidance