ILLUSTRATIVE DELIVERABLE / TECHNICAL TESTING
From evidence.To action.
VA / PT findings report
See how technical evidence is connected to exploitability, business impact and corrective actions.
ILLUSTRATIVE ASSESSMENT EXAMPLE
Illustrative findings and sample report structure, using fictitious assessment data.
Illustrative findings register
| Reference | Illustrative observation | Risk | Recommended action |
|---|---|---|---|
| VAPT-01 | API object-level authorisation check permits cross-account reads in a simulated test environment | High | Enforce server-side object permissions; regression test all affected endpoints |
| VAPT-02 | Administrative access allows broader-than-required privileges | Medium | Review role design and enforce least privilege |
| VAPT-03 | Legacy component appears on a public-facing application | Medium | Validate exposure and upgrade with change control |
What a complete engagement report typically considers
✓Objective, scope, assumptions and limitations
✓Approach and evidence supporting observations
✓Risk context and management implications
✓Recommended actions, owners and agreed retesting or follow-up
WHY THE OUTPUT MATTERS
Technical detail with management context.
A useful assessment allows technical teams to act on precise evidence while enabling leaders to decide what to prioritise, accept, monitor or escalate.