MENTOR TRACK // M14
Client Reporting Skill
The report is the product. A shell is only evidence.
Per finding
- 01What happened, in one paragraph, in the client's language.
- 02Why it matters: realistic business impact, not CVSS worship.
- 03How it was verified: commands, screenshots, timestamps.
- 04What the client should fix: specific, actionable, prioritized.
- 05How the client should verify the fix.
Interesting vs meaningful
An interesting technical issue impresses peers. A meaningful security finding changes what the client does on Monday. Aim for the second.