domains / families / security / redteam-report-template

redteam-report-template

authentic

Client-facing red-team deliverable format — codifies the Subject / Observations / Description / Impact / Recommendation / PoC structure used for external red-team engagements (not bug-bounty platform reports). Different audience, different tone, different cadence. Built from an authorized engagement deliverable where 14 findings were packaged into a 52KB MD + 2.2MB DOCX with 16 embedded screenshots. Use when the engagement is "external red team for an enterprise client" (not H1/Bugcrowd/Intigriti), when generating the final report, when the client has specified a custom report format, or when packaging findings into DOCX/PDF.

When to use

• External red-team engagements with a signed SOW
• Pentest reports going to a CISO / IT-Sec team (not a triager)
• Findings that will be reviewed by both technical and non-technical stakeholders
• Reports that need DOCX/PDF output (not just markdown / platform UI)
• Bug-bounty platform submissions (use `report-writing` / `bugcrowd-reporting` instead)
• Quick proof-of-concept memos
• Internal team writeups

When not to use

• Bug-bounty platform submissions
• Quick proof-of-concept memos
• Internal team writeups
• H1/Bugcrowd/Intigriti reports

Skill page

Source