A professional pentest report typically includes:

**Executive summary:** A non-technical overview for senior leadership, explaining the overall risk posture and key findings in business terms - **Methodology:** What was tested, how it was tested, and what frameworks were followed - **Findings:** Each vulnerability documented with: - Severity rating