You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/programs/pentests.md
+26Lines changed: 26 additions & 0 deletions
Original file line number
Diff line number
Diff line change
@@ -21,6 +21,32 @@ Here are the steps outlining the process of pentests:
21
21
22
22
After pentesting has been enabled for your program, your new pentest will be listed on the **Pentests** tab of your security page.
23
23
24
+
### Managing Pentests
25
+
After you log in to HackerOne, you’ll be met with the *Pentest Overview* page where you can view all information related to your pentest.
26
+
27
+
The Overview page enables you to view the:
28
+
* Number of vulnerability reports by severity and status.
29
+
* Members that comprise your pentest team. Your team includes the pentesters as well as your HackerOne customer success manager. As most communication between you and the team happens through Slack, there’s a link that’ll lead you to join the Slack workspace for your pentest.
30
+
* Assets that make up your pentest scope. Each asset is linked to its own testing checklist. You can also see the number of vulnerability reports associated with each asset as well as the state and severity.
31
+
* Progression status of your pentest. There are 4 progress phases to your pentest. They are:
32
+
33
+
Pentest Phase | Details
34
+
------------- | --------
35
+
Scoping | Assets are added to the scope of your pentest and you can set the dates of your testing period.
36
+
Test Period | Pentesters actively work on your pentest.
37
+
Retest Period | The pentest team retests any vulnerabilities that have been remediated from the pentest.
38
+
Completed | Your pentest is finished and the report is available to download.
39
+
40
+
When the final copy of your pentest report is ready, you can also directly download your report.
41
+
42
+
On the left-hand side of the page, you can access these pages to go deeper into your pentest:
43
+
44
+
Page | Details
45
+
---- | -------
46
+
Pentest Scope | You can view the details behind the progress of your checklists associated with your assets and see what each checklist entails.
47
+
Vulnerabilities | You can view all the vulnerabilities that have been found and the associated vulnerability report, as well as the status and severity of the report.<br><br> If you have an integration set up to a tracking tool like Jira, you can choose to link your reports to the tool to get visibility into the remediation status.
48
+
Pentest Team | You can view the members part of your pentest team.
0 commit comments