Pentest Reporting & Finding Delivery in PlexTrac (Mini Demo)

Here we can search for different write-ups throughout the platform within the content library. And when we select, you know, one or more findings, we can add those directly into the report. And you can see that as this loads, we don’t have to copy and paste a lot of information for how we want to standardize our our write-ups and capabilities. So, you see here it brought in this finding with lots of information that’s that’s already pre-built. And then we can come in and edit it as we see fit. We can change the score, we can add screenshots, we can add videos, all the capabilities that you would want within an editor, we have within PlexTrac. But this helps really save time to avoid copying and pasting from previous reports and standardize how you write things up. Finally, we can add findings in from various tools both from an API integration and from a file import. When we bring data in from external parties and thirdparty sources, we can do lots of things. We can have separate rules called parser actions or workflow automation. And when that data comes in, you can have you can do various activities on it as it comes in through our parser actions or through our workflow automation. Things like you can remove all informationals, you can close specific findings out, you can change the the severity of specific findings. But you see here that that we were able to bring in lots of information related to this nessa scan. And from here we can now actually begin the process of either publishing these findings. Say that we have a really critical finding that we’ve found and we want to get it into the hands of someone right away. So let’s just show that example. We have we can create a critical finding. We can say hey this was you I’ll just go ahead and say very serious for now just to kind of highlight that we can immediately publish this to a customer. So, what I can do here is, I can actually say this is published. And so, when I come back to this report, a customer can actually log in and see this finding without necessarily seeing the rest of the findings while you’re editing those and still in draft status as well as the narrative sections, but they can then become they can come in and start to do their triage, right away. How you do the status tracking and remediation within PlexTrac is very straightforward and streamlined as well. Anytime you see a status, you can create a set status. We we support sub statuses for a variety of workflows and then we can immediately assign this to user to users and we’ll go ahead and assign this to myself and now you see you have a historical track record of the finding as it progresses through its triage and remediation phases. Additionally, we can also create Jira tickets or service now tickets and automatically link those tickets together so that there is a birectional sync within each finding. And you’ll notice that now that I’ve created that I’ve linked that ticket to a Jira ticket and all the status updates will birectionally sync between PlexTrac and the Jira ticket. This this supports a streamlined way to remediate findings and stay collaborative not only through the engagement process but also through the tracking remediation life cycle as well. Let’s say I’ve got the report and the findings ready to export out to maybe deliver to a third party auditor or use as an artifact for some other form of delivery. What we can do is we can export into myriad templates in many formats including PDF and word. And you can customize the export to look exactly how you want and feel through our templating process. So as we export this document, if your organization needs a specific look and feel, we can support that. And you’ll see here that this is what the final report export looks like. And this is just one example of a template. And finally, we have an a workflow automation engine that supports being able to conduct a lot of activities that you would normally be doing manually and keep you focused on the right things. So for example we highlighted that as a critical finding came in we want to automatically assign that to a user for immediate triage. So within our workflow automation engine, you can see that we can specify criteria of when something comes in and is critical or meets certain criteria. You can automatically change its status. You can assign it to different users. You can fire off web hooks and you can send emails or create jar tickets. So we provide a lot of flexibility within the workflow automation engine to allow you to focus on the right things. So within PlexTrac, we support the entire lifecycle from report creation to automatically assigning and triaging those those findings so that you have visibility into what their status is and have a full-fledged analytics platform to be able to answer key questions about your progress and your risk status over time.