Pick a depth. Each prompt opens in your AI pre-loaded with the lesson. Click a row to preview the prompt.
The report is what the client buys. Findings should be: prioritised (CVSS or similar severity), reproducible (exact steps), and actionable (what to fix, how). A great report changes behaviour; a bad report becomes a PDF in a drawer. Senior testers spend ~30% of engagement time writing.
Finding template: title, severity (CVSS v3.1 with vector), CWE, summary (1 paragraph), reproduction (steps + screenshots), impact (what the attacker gains), recommendation (specific fix), references (CVE / RFC / OWASP). Executive summary at top with risk-bucket counts.