Updated
Vulnerability library
The vulnerability library holds reusable write-ups to report a pentest finding from, so wording, CVSS and references stay consistent.
In the app: Templates › VulnerabilitiesWho can do this: Contributor or above
Find a write-up
| Control | Narrows the list by |
|---|---|
| Search write-ups… | Words in the title and description |
| All categories | Category |
| All severities | Severity |
Select Reset to clear the filters, and choose a row to read the full write-up.
Report a finding from a write-up
- In the write-up, choose Report on an asset.
- Under Affected asset, pick the asset.
- If the finding belongs to an engagement, pick it under Engagement (optional).
- Select Report finding.
Other ways to record findings are in Add or import findings.
Did this answer your question?
Templates
Templates holds the reusable parts of policies and reports: policy and report templates, the vulnerability library, sections, variables and branding.
Sections
Sections are reusable blocks of text that policies and reports are built from; document variables are the facts they fill in, such as your company name.