What does a penetration test conclude?
The testing will result in a report with actionable advise of what risk is currently exposed in the application. The report you receive will contain an executive summary describing the risks involved and recommended short- and long-term actions.
River Security also provide a full colour coded and prioritized list of vulnerabilities identified. Each vulnerability will be rated based on several aspects, e.g. the impact on confidentiality, availability and integrity. The vulnerability will also have a score impacted by things such as if the vulnerability is exploitable without authentication, from the Internet or not, and so on.
Each vulnerability contains a description on how it was exploited, demonstrating the appropriate risk, and also suggestions on remediation, both short- and long-term where applicable.







