Tutorials / Pentesting

Pentest Findings

The Pentest Findings section is where you review the results of penetration tests performed against your targets—whether those targets are web applications, APIs, or network-based assets. This centralized dashboard provides a detailed overview of vulnerabilities, test metadata, and rich filtering tools to support remediation and reporting workflows.

To access this section, navigate to Pentest Findings from the left-hand menu.

  • * *

Filtering and Navigating Findings

At the top of the page, you’ll find a suite of filters that allow you to narrow down results based on specific criteria:

<tutorialimage module="m5" index="1" alt="Image 10 — Module 5 (local #1)"></tutorialimage>

Available Filters:

  • Cloud Environment:

<tutorialimage module="m5" index="2" alt="Image 11 — Module 5 (local #2)"></tutorialimage>

Select the hosting provider for the tested target:

  • Azure
  • AWS
  • Google Cloud (GCP)
  • Custom (for on-premises or unmanaged environments)
  • Compliance:

Filter findings by compliance frameworks (e.g., PCI-DSS, SOC 2, NIST 800, etc.) or view All.

  • Application Type:

Choose the category of the application (e.g., Web App, API).

  • Collection and Application (Required):

To view results, you must first select:

  • A Collection
  • A specific Application within that collection

Once selected, previously generated pentest results will populate the interface.

  • * *

Results Overview

When results are available, a high-level summary will be displayed, including:

  • Target name
  • Test duration
  • Number of findings by severity:
  • Critical
  • High
  • Medium
  • Low
  • Informational
  • * *

Exploring Detailed Findings

Findings Tab

All individual vulnerabilities are listed under the Findings tab. This area includes search functionality and column-level filters for quick access to specific issues.

Clicking on a finding opens its details view, which includes:

  • Description of the issue
  • Recommended Solution
  • Tags and References
  • CVSS Score with detailed breakdown
  • Affected Assets (URIs, files, endpoints)

Evidence and Technical Detail

For each affected item, clicking into the entry reveals additional details such as:

  • Request & Response payloads
  • Headers and Body content
  • Evidence snapshots

In the case of code-based findings (from SAST or full white-box testing), the panel shows the source code location, issue type, and line-level vulnerability context.

Based on the type of the finding, it may give you a “Validate” button, which when you click on it gives you a “curl” command to validate that finding:

  • * *

MITRE ATT&CK Integration

Click on the MITRE ATT&CK button to open a full matrix view. This board highlights the Tactics and Techniques associated with identified findings. Selecting one or more techniques dynamically filters the findings list to show related vulnerabilities.

  • * *

Reporting Options

Use the Download button to export results in multiple formats:

  • CSV – Flat data export for external tooling or spreadsheets
  • Report Generation – Fully formatted reports

Report Output Formats:

  • Microsoft Word (DOCX)
  • HTML

Reports are based on tenant-level templates known as Base Templates, which are fully customizable. Templates can reflect:

  • Company branding/themes
  • Audience types (e.g., CISO, CIO, Development, Compliance)
  • Compliance standards (e.g., SOC 2, HIPAA, ISO 27001)

Creating Custom Report Templates

To create or manage templates:

1. Go to Inventory Management

2. Select the desired PAC file

3. Open the hamburger menu

4. Click Report Templates

It’s best to start by downloading an existing Base Template, customizing it, and uploading it back to suit your organization’s needs.

  • * *

Correlated Infrastructure Findings (CSPM)

If the target includes Cloud Security Posture Management (CSPM) analysis, you can click Correlated Infra Findings to view a diagram of the infrastructure components associated with the target.

  • Clicking on a resource reveals its CSPM test results
  • This view helps visualize how cloud configurations may relate to the identified vulnerabilities

Drift Detection with IaC Security

When both Infrastructure-as-Code (IaC) and CSPM testing are enabled:

  • The system automatically performs configuration drift analysis
  • Differences between IaC definitions and live CSPM configurations are highlighted
  • This helps you catch deviations from expected configurations and address misalignments between declared and actual infrastructure states
  • * *

Complete Security Visibility

In a single view, the Pentest Findings page can consolidate results across multiple security layers:

  • Penetration Testing
  • Application SAST (Static Analysis)
  • SCA (Software Composition Analysis)
  • Secrets Detection
  • CSPM
  • IaC Security

This holistic visibility supports true full-spectrum white-box testing, empowering your teams to assess and remediate vulnerabilities across the entire stack.

  • * *

Additional Screenshots

Additional screenshots, in order of appearance.

<tutorialgallery module="m5" startIndex="3"></tutorialgallery>