ILREDO SENTINEL
Request a quote
Menu

Services

Reporting: Executive Summary and Technical Report

The value of a security test is measured by how well its report is understood and acted upon. We close every engagement with two reports for two different audiences.

Request a quote Methodology

The executive summary explains the business impact of the risks, the overall security posture and the key decisions, without requiring technical knowledge. It can be presented to your board or your customers.

The technical report covers each finding with reproduction steps, evidence, the CVSS v4.0 vector, affected assets and concrete remediation advice. Developers and administrators can work directly from it.

What we test

  • Executive summary: overall risk posture, key findings and recommendations
  • Technical findings: description, impact, evidence and reproduction steps
  • CVSS v4.0 vector and score; priority based on business impact
  • Mapping to OWASP, MITRE ATT&CK, ISO 27001 and KVKK
  • Prioritised remediation plan
  • Updated status report after the retest

How we work

  1. Immediate notification

    Critical findings are reported straight away during testing, through a secure channel.

  2. Draft report

    Findings are shared in a draft report and your technical questions are answered.

  3. Debrief

    Separate debrief sessions are held for management and the technical team.

  4. Retest report

    Fixes are retested and the current status is documented.

What you receive

  • Executive summary (PDF)
  • Technical report (PDF)
  • Findings list (XLSX/CSV)
  • Retest report

A good fit for

  • Teams reporting to a board
  • Organisations that must provide evidence to customers or auditors
  • Teams importing findings into an issue tracker

Frequently asked questions

How are reports delivered?

Reports are delivered encrypted, with the password sent through a separate channel. We agree with you how long we keep copies as part of the engagement.

In which language is the report written?

Turkish, English or German. If you wish, the executive summary and the technical report can be written in different languages.

Related services

API Penetration Testing

Testing for your REST and GraphQL APIs, focused on authorisation, business logic and data exposure.

See your weaknesses before attackers do.

Let's define the scope together. You'll receive a written proposal with the right type of test and a clear timeline.

Book an intro call