Help Centre
Updated

Engagements

An engagement records one penetration test: its scope and testing window, the findings against it, and the client-ready report built from them.

In the app: Pentest › EngagementsWho can do this: Contributor or above

Start an engagement and define its scope

  1. Open Pentest › Engagements and select New engagement.
  2. Enter a Name, pick a Type and an Approach, then select Create.
  3. On Details, fill in the testing window, the Client reference and a Summary, which opens the report.
  4. On Scope, select Add target and enter the Target. Optionally link one of your assets; clear In scope for a target you are not testing.
  5. Select Save to keep your changes on both tabs.

Move the engagement through its stages with the button beside its status badge, such as Start testing or Mark delivered.

Attach findings and set their order

Findings stay in Exposure, where remediation is tracked.

  1. Create findings with Add or import findings, or from a write-up in Templates › Vulnerabilities.
  2. On the engagement's Findings tab, choose Add findings. Each one gets a reference number in the report.
  3. Reorder with the up and down arrows, or sort on a column and choose Renumber to match this order.

To print the same weakness on each host separately, choose One finding per host in the selector at the top of the tab.

Follow remediation

  1. Open the engagement's Remediation tab to see its open and resolved findings by severity.
  2. Assign findings and update their status in Exposure.

Generate the report

Select Generate report. Paid plans include report generation; see pricing. It also needs a verified domain. The report opens in Assurance › Reports; see Reports for review, approval and export.

To delete an engagement, open it, select its delete (bin) button, then Delete.

To give a client access to the project, see users and access.

Did this answer your question?

On this page