A penetration test, also known as a pen test, is a simulated cyber attack that is performed by ethical hackers to test the security of a computer system, network, or web application. A penetration test report is a document that summarizes the findings of the pen test and provides recommendations for improving the security of the system. Some examples of attributes that may be included in a penetration test report are:
| Scope | The boundaries and objectives of the pen test, including the systems and components that were tested. |
| Methodology | The approach and techniques used to conduct the pen test. |
| Findings | A summary of the vulnerabilities and weaknesses discovered during the pen test. |
| Evidence | Detailed information about each vulnerability, including how it was discovered and how it could be exploited. |
| Risk assessment | An evaluation of the potential impact and likelihood of each vulnerability being exploited. |
| Recommendations | Suggestions for remedying the vulnerabilities and improving the security of the system. |
| Executive summary | A summary of the key findings and recommendations of the pen test. |
Penetration test reports are an important resource for organizations, as they provide insight into the vulnerabilities of their systems and help them identify and prioritize the necessary security measures to protect against cyber attacks.