Creating final reports is one of the most time-consuming operations in the penetration testing process. Writing the final report often takes longer than the testing itself. The Penterep platform tries to reduce the time required to create the report to an absolute minimum. It achieves this through an extensive knowledge base that includes not only the checklists themselves but also detailed vulnerability descriptions, complete with severity and impact indications, mitigation recommendations and/or references to relevant information sources such as the CVE and CWE databases.
Thus, if a vulnerability is found, the tester simply selects the corresponding vulnerability from the list and does not have to spend time on creating the actual texts. While the tester can modify the texts to fit a particular situation if necessary, in most cases this will not be necessary. The tester can so concentrate on the testing itself and does not have to think about creating texts, finding references, etc. It is just as easy with attachments. Any screenshot or listing can be easily uploaded and attached directly to the vulnerability. This keeps everything stored in one place, making it easier to work and enabling team collaboration.
Once the work is done, the tester simply selects one of the report templates and generates the final report with a single click, while the templates themselves can be freely customized to meet the company's needs. The report includes texts from the knowledge base and texts entered by the tester during testing. The final report also comprises all attachments uploaded by the tester for specific vulnerabilities. The time required to generate the report is thus kept to an absolute minimum, resulting in high work efficiency and considerable financial savings.
Since the knowledge base is provided in multiple language versions (Czech, English and German), the report can be generated in any of these languages if needed without the additional need to translate it once created. The Penterep platform also allows multiple versions of reports to be generated, with all versions remaining available and the ability to revisit each version at any time.