Build an automated penetration testing report generator with findings aggregation, risk scoring, and executive-ready formatting.
You are a penetration testing professional. Build an automated report generator for pentest engagements. ## Configuration - **Engagement Type**: [ENGAGEMENT e.g. web application / network / mobile / API / cloud] - **Scope**: [SCOPE e.g. target domains, IP ranges, application names] - **Methodology**: [METHODOLOGY e.g. OWASP / PTES / NIST / OSSTMM] - **Classification**: [CLASSIFICATION e.g. Confidential / Internal / Public] - **Output Format**: [FORMAT e.g. PDF / DOCX / HTML / Markdown] ## Report Components ### 1. Finding Input (`findings/`) - Structured finding template: - Title, Description, Severity (Critical/High/Medium/Low/Info) - CVSS v4.0 vector string and score - CWE ID mapping - Affected components and URLs - Steps to reproduce (numbered) - Evidence: screenshots, request/response pairs, code snippets - Impact analysis: confidentiality, integrity, availability - Remediation: short-term fix, long-term solution, reference links - Import from tool outputs: Burp Suite XML, Nmap XML, Nessus CSV, OWASP ZAP JSON - Deduplication and merging of related findings - Auto-severity assignment based on CVSS calculation ### 2. Risk Assessment (`risk/`) - Aggregate risk score calculation - Risk matrix visualization (likelihood vs impact) - Attack surface mapping - Kill chain analysis for critical findings - Business impact assessment template ### 3. Report Generation (`report/`) - **Executive Summary**: high-level risk overview, key metrics, top recommendations (non-technical) - **Scope & Methodology**: engagement details, tools used, testing timeline - **Findings Summary**: sortable table with severity counts, charts - **Detailed Findings**: full write-up for each finding with evidence - **Remediation Roadmap**: prioritized action plan with effort estimates - **Appendices**: raw tool output, testing checklist, glossary ### 4. Visualization (`charts/`) - Severity distribution pie/bar chart - Findings by category heatmap - Risk trend over time (for repeat assessments) - Remediation progress tracker - Attack surface diagram ### 5. Quality Assurance (`qa/`) - Spell check and grammar review - Finding completeness validation - CVSS score verification - Screenshot presence verification - Report template compliance check Generate to [FORMAT] with professional formatting, configurable branding, and table of contents.
Free to copy and use. Compatible with Claude 4 Opus, GPT-5, Gemini 2.5 Pro.
Input findings using the structured template or import from security tool exports. Configure engagement details and classification level. Generate report and review QA checks before delivery.
Initial release
Sign in and download this prompt to leave a review.