{"id":3879,"date":"2025-09-18T10:36:23","date_gmt":"2025-09-18T08:36:23","guid":{"rendered":"https:\/\/security.sauer.ninja\/?p=3879"},"modified":"2025-09-18T11:01:18","modified_gmt":"2025-09-18T09:01:18","slug":"ptdoc-documentation-and-reporting-for-penetration-tests","status":"publish","type":"post","link":"https:\/\/security.sauer.ninja\/en\/binsec\/ptdoc-documentation-and-reporting-for-penetration-tests\/","title":{"rendered":"PTDoc \u2013 Documentation and Reporting for Penetration Tests"},"content":{"rendered":"\n<p>The <strong>binsec GmbH<\/strong> relies on <strong>PTDoc<\/strong>\u00ae for its penetration tests \u2013 a specialized <a href=\"https:\/\/binsec.com\/en\/news\/why-binsec-uncovers-findings-others-miss\/\">tool for structured penetration testing and professional report generation<\/a>. PTDoc was developed by <strong>binsec systems GmbH<\/strong>.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1521\" height=\"1115\" src=\"https:\/\/security.sauer.ninja\/files\/ptdoc-mockup.jpg\" alt=\"\" class=\"wp-image-3887\"\/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p>The idea for PTDoc emerged during the growth of the binsec team: How can quality remain consistently high when individual penetration testers have different personal focus areas? And how can we ensure that the outcome of a test is always identical \u2013 regardless of which senior penetration tester carries it out?<\/p>\n\n\n\n<p>Before PTDoc, binsec faced the typical challenge: Should reports be written in <strong>Word<\/strong> or created with <strong>LaTeX<\/strong>? Initially, the decision was made for LaTeX, which produced technically clean but rather \u201ctypical\u201d LaTeX documents in terms of design. With PTDoc, this changed fundamentally \u2013 today, it delivers <strong>professionally designed reports<\/strong> that are still powered by extensive LaTeX code in the background but managed through a user-friendly interface.<\/p>\n\n\n\n<p>The core idea of the tool is to provide a uniform and standardized methodology for different targets \u2013 such as Active Directory, mobile applications (e.g., Android apps), or networks. The binsec team continuously maintains and extends this methodology, integrating well-established standards such as the <strong>OWASP Testing Guide<\/strong>, <strong>MASVS<\/strong>, and <strong>OSSTMM<\/strong>. This ensures consistently high quality and the exact repeatability of penetration tests.<\/p>\n\n\n\n<p>In recent years, it has become clear that this structured approach regularly reveals vulnerabilities that were missed in previous tests. One client even stated that they no longer consider earlier assessments from other providers to have been \u201creal\u201d penetration tests.<\/p>\n\n\n\n<p>PTDoc covers all three phases of pentest documentation:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Execution of the test<\/strong> \u2013 systematically working through the defined methodology.<\/li>\n\n\n\n<li><strong>Creation of findings<\/strong> \u2013 including management-level descriptions, detailed technical analysis, risk ratings (qualitatively via traffic-light system or quantitatively via CVSS), and management of screenshots and evidence.<\/li>\n\n\n\n<li><strong>Report generation<\/strong> \u2013 automated creation of a consistent, audit-proof report.<\/li>\n<\/ul>\n\n\n\n<p><strong>Retesting<\/strong> is also integrated: Once a tester verifies that a client has fixed a vulnerability, they simply document the proof of fix in the finding. When rebuilding the report, the issue is automatically marked as remediated, and the management summary is updated accordingly.<\/p>\n\n\n\n<p>In addition, PTDoc supports the creation of <strong>both German and English reports<\/strong>, making it easy to provide clients with deliverables in either language \u2013 or even in both.<\/p>\n\n\n\n<p><strong>Conclusion:<\/strong> With PTDoc, penetration testers can fully focus on their actual work \u2013 conducting the test. At the same time, report creation becomes quick and efficient, ensuring that clients receive their results shortly after the test is completed.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The binsec GmbH relies on PTDoc\u00ae for its penetration tests \u2013 a specialized tool for structured penetration testing and professional report generation. PTDoc was developed by binsec systems GmbH. The idea for PTDoc emerged during the growth of the binsec team: How can quality remain consistently high when individual penetration testers have different personal focus &#8230; <span class=\"more\"><a class=\"more-link\" href=\"https:\/\/security.sauer.ninja\/en\/binsec\/ptdoc-documentation-and-reporting-for-penetration-tests\/\">[Read more&#8230;]<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[227],"tags":[],"class_list":{"0":"entry","1":"post","2":"publish","3":"author-psauer","4":"post-3879","6":"format-standard","7":"category-binsec"},"_links":{"self":[{"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/posts\/3879","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/comments?post=3879"}],"version-history":[{"count":11,"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/posts\/3879\/revisions"}],"predecessor-version":[{"id":3902,"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/posts\/3879\/revisions\/3902"}],"wp:attachment":[{"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/media?parent=3879"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/categories?post=3879"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/tags?post=3879"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}