Last updated
What's in the sample report?
Everything a real Ironbark Cyber client receives at the end of a penetration test, with the client's details replaced and nothing else changed. It's the fastest way to judge whether our reporting would actually work inside your organisation. For your engineers, your executives and your auditors.
- Executive summary. Written for non-technical stakeholders: what we tested, what we found, what it means, in plain language.
- Impact-ranked findings. Every finding ranked by real-world impact. Not raw CVSS theatre. With severity reasoning you can defend to a board.
- Evidence and reproduction steps. Screenshots, requests and step-by-step reproduction your engineers can act on the same day.
- Remediation guidance. Specific fixes, not "sanitise your inputs".
- Attestation letter. The customer- and auditor-shareable letter that confirms testing happened without exposing the technical detail.
- Retest section. How the free 90-day retest of fixed issues is documented.
Who is this for?
Anyone about to buy a penetration test. Reports vary wildly across the industry. Some are scanner exports with a logo. And comparing sample reports is the single most revealing pre-purchase check you can do. Ask every firm you're considering for one; here's ours. When you're ready to scope the real thing, start with penetration testing or an LLM pentest if AI is in the mix.
About Ironbark Cyber
Ironbark Cyber is an Australian AI security and penetration testing consultancy, founded in 2025 by Luke Stephens (hakluke) and part of the Haksec group. The people who scope your work are the people who do it, and the report is written by the person who found the bugs.
Download
Get the sample report
Tell us who you are and we'll send it over.