Skip to content
Prepare my pentest

Results

What a completed pentest produces: findings with their evidence, attack paths, a frozen report, two correction retest batches and a NIS2 evidence index.

Explanation · For everyone1 min read

Markdown versionOpen in ChatGPTOpen in Claude

A completed pentest publishes its results automatically: the demonstrated findings and their evidence, the derived attack paths, then the final report, frozen and exportable. Two correction retest batches are included within sixty days. The NIS2 index organises the evidence according to selected controls, without claiming to be an attestation.

In this section

  1. 01Findings and evidenceRead a published finding: CVSS severity, CWE classification, description, impact, recommendation and redacted HTTP evidence. Track its fix in the application.
  2. 02Attack pathsHow SpectrAI links proven findings into attack paths, what the provenance of each step means, and why a path adds no assumption to the evidence.
  3. 03The reportThe final report of a pentest: automatic publication, content, frozen versions, PDF export, revocable share link, brand, and what it contains when no finding was proven.
  4. 04Correction retestsHave your fixes verified with the two retest batches included within sixty days of each report: prepare a batch, launch it, read its verdict and understand its limits.
  5. 05NIS2 indexWhat the NIS2 evidence index of a SpectrAI report is, the article 21 controls it organises, and why it is neither an attestation nor a certification.