PXLSecurity LTD., Sofia, Bulgaria Offensive security since 2014[email protected]
PXLQuillFeaturesWorkflowUse casesDocumentationRequest access ↗

PXLQuill / Guide 09

Build a reusable finding library

Standardise the starting point, then tailor the finding.

Build a reusable finding librarySynthetic demo · Open full-size ↗

01 / Browse reusable entries

Open Finding library to search existing patterns. Choose a relevant entry to start an engagement finding, then customise it for the actual system and scope.

02 / Write useful reusable content

Keep a library description generic enough to reuse. Prefer remediation principles and verification steps over customer-specific hosts, credentials or screenshots.

03 / Keep the assessment authoritative

The engagement finding is the record of the actual test. Confirm the affected instance, severity, evidence and validation state there. Do not substitute a library description for observed evidence.

04 / Maintain a consistent voice

Use a predictable structure for impact, reproduction and remediation. Periodically review shared library wording so stale assumptions do not spread into new reports.

Illustrations use fictional Northstar / Atlas data. Interface availability depends on your role, the selected workspace and report state. Never use real customer data to reproduce a documentation example.
Synthetic demo · Full interfaceOpen original ↗