Engagements
An engagement records one penetration test: its scope and testing window, the findings against it, and the client-ready report built from them.
Start an engagement and define its scope
- Open Pentest › Engagements and select New engagement.
- Enter a Name, pick a Type and an Approach, then select Create.
- On Details, fill in the testing window, the Client reference and a Summary, which opens the report.
- On Scope, select Add target and enter the Target. Optionally link one of your assets; clear In scope for a target you are not testing.
- Select Save to keep your changes on both tabs.
Move the engagement through its stages with the button beside its status badge, such as Start testing or Mark delivered.
Attach findings and set their order
Findings stay in Exposure, where remediation is tracked.
- Create findings with Add or import findings, or from a write-up in Templates › Vulnerabilities.
- On the engagement's Findings tab, choose Add findings. Each one gets a reference number in the report.
- Reorder with the up and down arrows, or sort on a column and choose Renumber to match this order.
To print the same weakness on each host separately, choose One finding per host in the selector at the top of the tab.
Follow remediation
- Open the engagement's Remediation tab to see its open and resolved findings by severity.
- Assign findings and update their status in Exposure.
Generate the report
Select Generate report. Paid plans include report generation; see pricing. It also needs a verified domain. The report opens in Assurance › Reports; see Reports for review, approval and export.
To delete an engagement, open it, select its delete (bin) button, then Delete.
To give a client access to the project, see users and access.
Did this answer your question?
Exposures
Dark web › Exposures lists leaked credentials and account addresses for your domains, found in breaches and on the dark web, to resolve once each account is secured.
Governance
Governance holds your security policies, from a starter policy or your own sections through review and approval to an exported document.