Reporting

Access and share reports that communicate your security posture and testing results.

Report Center

The Report Center allows you to generate customized reports from your findings and share them with team members. To access the Report Center, select Report Center from the left navigation under Reporting. [1]

Two report types are available:

Executive Report
A streamlined report highlighting finding titles, severity levels, and current status. Designed to communicate organizational risk to leadership and stakeholders.

Full Report
A detailed report including complete finding details, supporting evidence, and optional inclusion of Attack Narratives.

Generating a Report

Reports can be generated from a project and date range, or from a specific filtered set of findings. You can generate reports for External, Internal and Web Application Projects, on demand.

To generate a report from a project and date range:

1. Navigate to Report Center in the left navigation.
2. Click Create New in the top right
3. Select your report type.
4. Select Project(s) and specific date range.
5. Select the project(s) to include [1] and set your date range. [2] You can also filter by custom tagged assets. [3]

6. Give your report a title and select any additional options:
   • Include Findings with a status of Closed — includes closed findings within the selected project and date range
   • Include Attack Narratives — includes Attack Narratives associated with the selected projects
7. Click View to preview your report. From this preview you can click Back to Reports [1] to land on the Report Center to share a link to your newly created report, make Edits [2], or Save as PDF [3].
   

To generate a report from specific findings:

1. Navigate to Report Center in the left navigation.
2. Select your report type.
3. Select Specific findings.

4. Click Filters to to filter the findings you want to include in your report.. Filter options include Status, Project, State, Severity, Security Tag, Time Period, and Asset Custom Tag. [1]
   

   Tip: Use the Security Tag filter to include findings tagged with OWASP or PCI classifications when generating reports for compliance purposes.

5. Select the findings to include in your report.
6. Give your report a title and select any additional options.
7. Click View to preview your report. From this preview you can click Back to Reports [1] to land on the Report Center to share a link to your newly created report, make Edits [2], or Save as PDF [3].

Sharing a Report

After previewing your report, you can share it directly with team members from within the platform. Each recipient receives a unique access link via email. Recipients must have a Sprocket account to view the report.

To share a report:

1. After previewing your report, select Share under the Actions menu. [1]
   
2. Select the team members to share with by highlighting their names.
3. Click Share. Each selected user will receive an email with a unique access link.

Once shared, a report's data is fixed. Reports you haven't shared still update with your latest findings. To share newer data, create a new report.

Attestation Letter

The Attestation Letter is a generated document confirming that penetration testing has been contracted and performed. It includes a summary of your organization's engagement and a breakdown of the testing performed across your contracted projects. It is commonly used for compliance and audit purposes. Any client user can generate or share an Attestation Letter.

Generating an Attestation letter

1. Select Attestation Letter from the left navigation. [1]
2. Click View Latest Report. [2]
   
3. Your letter is generated and available to share immediately.
   

Sharing an Attestation Letter

Attestation Letters can be shared with anyone via email. Each recipient receives a unique access link. Recipients do not need a Sprocket account to view the letter.

Previously generated letters can be reshared at any time. If a link was sent in error, you can void it to revoke access.

To share an Attestation Letter:

1. Select Attestation Letter from the left navigation.
2. Click Share to share the latest report.
3. Enter the recipient email address(es), separated by spaces.
   
4. Click Share. Each recipient will receive a unique access link.

To reshare a previously generated Attestation Letter

1. Click the expand chevon on the individual letter you want to share. [1]
2. Click Reshare
   
3. Enter the recipient email address(es), separated by spaces.
4. Click Share. Each recipient will receive a unique access link.

To void a shared link:

1. Locate the previously shared letter.
2. Select Void Link to revoke access for individual recipients [1] or click Void All Links to revoke access for all recipients. [2]