2026-09-21 01:07 UTC
@yojimbo@masto.hackers.town
> From whom are they being protected?
Protected from someone finding their way into my system and accessing my client's details and vulns.
> Who is the target audience for a report?
Whoever my client gives access - usually we set up a channel with the dev team, and I report findings directly to them. I don't think I've had a client gatekeep my work from their team before.
Replies (1)
-
@yojimbo@masto.hackers.town 2026-09-21 01:29
@valorin@phpc.social Ah, so in this context you're the one producing the report? We have one provider who currently does automated testing & their platform stores the results/vulns; these can be collected as a single report or farmed out individual tickets if we give them a route to do so. It's a little frustrating, because the individual vuln can benefit from things like the scope statement, which are only in the bigger document. And the devs don't have a way to get creds on the supplier's system easily.