Testing Workflow & Reporting

Writing a security finding

SectionInclude
TitleClear vulnerability name
ImpactWhat an attacker could achieve
EvidenceMinimal reproducible proof
Root causeWhy the weakness exists
RemediationSpecific engineering fix
RetestWhether the fix worked

A strong report helps engineers fix the issue. Avoid sensational wording; explain the security boundary, affected component and practical remediation.

Lesson complete?Use the next lesson to continue the learning path.