Sample report
This is an example of how a finding is written. It is not from a client.
Remote access exposed to the internet with a weak login policy
Business impact
An attacker who guesses or reuses a password could reach internal systems without being in the building. For a firm this size, that can mean downtime, a data-protection incident, and a difficult conversation with customers or insurers.
What the technical team gets
The affected address, the evidence, the severity, and the recommended change. Proof is included so the fix can be checked.