Reports & Attestation

PDF report

Every completed pentest generates a PDF report containing:

• Executive summary - AI-generated overview of security posture
• Methodology - Tools used and testing approach
• Findings - All vulnerabilities with severity, description, proof of exploit, and remediation
• Attack surface map - Discovered assets and entry points
• Threat model - STRIDE-based analysis

Download via API

curl -H "X-API-Key: $TURBOPENTEST_API_KEY" \
  https://turbopentest.com/api/pentests/{id}/report \
  -o pentest-report.pdf

Download from dashboard

Go to the pentest results page and click Download Report.

Attestation letter

A formal letter confirming a penetration test was performed, suitable for sharing with auditors or customers. The attestation includes blockchain verification details - a SHA-256 hash of the report is anchored on the Base L2 blockchain, providing tamper-proof verification that the report has not been altered.

Download via API

curl -H "X-API-Key: $TURBOPENTEST_API_KEY" \
  https://turbopentest.com/api/pentests/{id}/attestation \
  -o attestation-letter.pdf

Report export

Export findings to third-party pentest management platforms:

• PlexTrac - CSV format compatible with PlexTrac import
• Dradis - XML format for Dradis projects
• AttackForge - JSON format for AttackForge
• Ghostwriter - JSON format for Ghostwriter

See Report Export for details.

Sample reports

View sample deliverables without an account:

• Sample Report (PDF)
• Sample Attestation (PDF)