Deliverables

At RedTeam Security, we consider the delivery and reporting phase to be the most important and we take great care to ensure we've communicated the value of our service and findings thoroughly. Our penetration testing and Red Teaming deliverables consists of an electronic report that includes several key components including, but not limited to: Executive Summary, Scope, Findings, Evidence, Tools and Methodology.

In addition to the report, a raw file in comma-separated value (CSV) format is also provided in an effort to optimize the remediation and management of any identified findings.

The findings within our penetration testing and Red Teaming deliverables are communicated through our partner portal and can be reviewed virtually. During this time, RedTeam Security consultants will walk through the report, in detail, to ensure all findings and their corresponding description, risk rating, impact, likelihood, evidence, and remediation steps are thoroughly understood. While this typically involves a single meeting, there is no limitation to that number. The key underlying message is that all information is clearly understood and that a roadmap toward remediation/mitigation is crystal clear.

The following sample reports are available upon request.

• Web Application
• Network
• Physical Penetration Testing
• Social Engineering

Components

Some of the key components to our penetration testing, Red Teaming and social engineering deliverables include, but are not limited to:

• Scope
• Control Framework  (ie: OWASP, PCI, PTES, OSSTMM)
• Timeline
• Executive Summary Narrative
• Technical Summary Narrative
• Report Summary Graphs
• Summary of Findings
• Findings (Description, Business Impact, Recommendation, Evidence, References, CVSS, Risk Rating Calculation)
• Methodology and Approach
• Risk Rating Factors
• Tool

One of our core goals as an organization is education. We work to make sure your team has a full understanding of your Red Teaming or penetration testing deliverables at the close of our engagement and are available thereafter to conduct follow-up remediation testing at no additional cost.