Clarven Security

See the report before you buy

Our public sample report comes from a test environment we built and own, so we can show everything: the scope, every finding with its proof, the coverage matrix and the attestation letter. The first edition is being prepared now.

In preparation

What is in the report

  1. Management summary in plain language
  2. Scope: assets, environment, roles, versions, test dates
  3. Method and ASVS level
  4. Findings, each with proof, impact, fix and risk rating
  5. Coverage matrix: every endpoint and role against every requirement
  6. Retest result
  7. Signed attestation letter

Want it when it is ready? Email us and we'll send it. contact@clarvensecurity.com

The attestation letter

One page your customer or auditor can read in a minute. This is the template.

Prisma Labs

Penetration test attestation

To whom it may concern,

Prisma Labs carried out a penetration test of [application and API] for [client] between [start date] and [end date].

Scope: [hosts, environment, user roles]. Method: OWASP ASVS level [1, 2 or 3], following the OWASP Web Security Testing Guide.

Findings: [n] critical, [n] high, [n] medium, [n] low. Retest on [date]: [n] of [n] findings resolved.

Prisma Labs is independent of [client] and did not build or operate the systems tested. This letter reflects the state of the systems at the time of testing.

[Tester name], Prisma Labs, [date]