Access and share reports that communicate your security posture and testing results.

Table of Contents

Getting Started

Welcome

Platform Onboarding

Testing Process

Using the Platform

Findings Management

Testing Activities

Reporting

Security Metrics & Analysis

Attack Surface

Account Management

Integrations

FAQs & Support

FAQs

Best Practices

<aside> 🔗

Quick Links

Report Center

Attestation Letter

</aside>

Report Center

The Report Center allows you to generate customized reports from your findings and share them with team members. To access the Report Center, select Report Center from the left navigation under Reporting. [1]

Two report types are available:

Executive Report A streamlined report highlighting finding titles, severity levels, and current status. Designed to communicate organizational risk to leadership and stakeholders.

Full Report A detailed report including complete finding details, supporting evidence, and optional inclusion of Attack Narratives.

Generating a Report

Reports can be generated from a project and date range, or from a specific filtered set of findings. You can generate reports for External, Internal and Web Application Projects, on demand.

<aside> <img src="notion://custom_emoji/ede23b80-db43-4102-883e-d404c44f363c/32f14309-3808-804c-a39b-007a3a539ba4" alt="notion://custom_emoji/ede23b80-db43-4102-883e-d404c44f363c/32f14309-3808-804c-a39b-007a3a539ba4" width="40px" />

Note: Web Application reports require that the assets associated with this project have a **Custom Tag** in order to generate a report. Reach out to [email protected] for assistance.

</aside>

To generate a report from a project and date range:

1. Navigate to Report Center in the left navigation.
2. Click Create New in the top right
3. Select your report type.
4. Select Project(s) and specific date range.
5. Select the project(s) to include [1] and set your date range. [2] You can also filter by custom tagged assets. [3]

<aside> <img src="notion://custom_emoji/ede23b80-db43-4102-883e-d404c44f363c/32f14309-3808-804c-a39b-007a3a539ba4" alt="notion://custom_emoji/ede23b80-db43-4102-883e-d404c44f363c/32f14309-3808-804c-a39b-007a3a539ba4" width="40px" />

To generate a Web Application report, a Custom Tag is required. [3]

</aside>

1. Give your report a title and select any additional options:
   • Include Findings with a status of Closed — includes closed findings within the selected project and date range
   • Include Attack Narratives — includes Attack Narratives associated with the selected projects
2. Click View to preview your report. From this preview you can click Back to Reports [1] to land on the Report Center to share a link to your newly created report, make Edits [2], or Save as PDF [3].

To generate a report from specific findings:

1. Navigate to Report Center in the left navigation.
2. Select your report type.
3. Select Specific findings.
4. Click Filters to to filter the findings you want to include in your report.. Filter options include Status, Project, State, Severity, Security Tag, Time Period, and Asset Custom Tag. [1]

<aside> <img src="notion://custom_emoji/ede23b80-db43-4102-883e-d404c44f363c/32f14309-3808-804c-a39b-007a3a539ba4" alt="notion://custom_emoji/ede23b80-db43-4102-883e-d404c44f363c/32f14309-3808-804c-a39b-007a3a539ba4" width="40px" />

Tip: Use the Security Tag filter to include findings tagged with OWASP or PCI classifications when generating reports for compliance purposes.

</aside>

1. Select the findings to include in your report.
2. Give your report a title and select any additional options.
3. Click View to preview your report. From this preview you can click Back to Reports [1] to land on the Report Center to share a link to your newly created report, make Edits [2], or Save as PDF [3].

Sharing a Report

After previewing your report, you can share it directly with team members from within the platform. Each recipient receives a unique access link via email. Recipients must have a Sprocket account to view the report.

To share a report:

1. After previewing your report, select Share under the Actions menu. [1]

1. Select the team members to share with by highlighting their names.
2. Click Share. Each selected user will receive an email with a unique access link.

Once shared, a report's data is fixed. Reports you haven't shared still update with your latest findings. To share newer data, create a new report.

<aside> <img src="notion://custom_emoji/ede23b80-db43-4102-883e-d404c44f363c/32f14309-3808-804c-a39b-007a3a539ba4" alt="notion://custom_emoji/ede23b80-db43-4102-883e-d404c44f363c/32f14309-3808-804c-a39b-007a3a539ba4" width="40px" />

Tip: You can Share or View reports others created. You can Edit or Delete your own reports until they are shared.

</aside>

Attestation Letter

The Attestation Letter is a generated document confirming that penetration testing has been contracted and performed. It includes a summary of your organization's engagement and a breakdown of the testing performed across your contracted projects. It is commonly used for compliance and audit purposes. Any client user can generate or share an Attestation Letter.

Generating an Attestation letter

1. Select Attestation Letter from the left navigation. [1]
2. Click View Latest Report. [2]

1. Your letter is generated and available to share immediately.