{"id":3879,"date":"2025-09-18T10:36:23","date_gmt":"2025-09-18T08:36:23","guid":{"rendered":"https:\/\/security.sauer.ninja\/?p=3879"},"modified":"2026-05-17T20:56:41","modified_gmt":"2026-05-17T18:56:41","slug":"ptdoc-documentation-and-reporting-for-penetration-tests","status":"publish","type":"post","link":"https:\/\/security.sauer.ninja\/en\/binsec\/ptdoc-documentation-and-reporting-for-penetration-tests\/","title":{"rendered":"PTDoc \u2013 Documentation and Reporting for Penetration Tests"},"content":{"rendered":"\n<p>The idea for <a href=\"https:\/\/ptdoc.tools\/en\/\">PTDoc<\/a> emerged during the growth of our binsec team: How can we keep quality consistently high when individual penetration testers have different personal areas of expertise? And how do you ensure that the result of a pentest is always consistent \u2013 regardless of which Senior Penetration Tester conducts the assessment?<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img alt=\"\" loading=\"lazy\" decoding=\"async\" width=\"1521\" height=\"1115\" src=\"https:\/\/security.sauer.ninja\/files\/ptdoc-mockup.jpg\" alt=\"\" class=\"wp-image-3887\"\/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p>Before PTDoc, we at binsec faced the typical challenge: Should reports be written in <strong>Word<\/strong> or created with <strong>LaTeX<\/strong>? Initially, the decision was made for LaTeX, which produced technically clean but rather \u201ctypical\u201d LaTeX documents in terms of design. With PTDoc, this changed fundamentally \u2013 today, it delivers <strong>professionally designed reports<\/strong> that are still powered by extensive LaTeX code in the background but managed through a user-friendly interface.<\/p>\n\n\n\n<p>The core idea of the tool is to provide a uniform and standardized methodology for different targets \u2013 such as Active Directory, mobile applications (e.g., Android apps), or networks. Our binsec team continuously maintains and extends this methodology, integrating well-established standards such as the <strong>OWASP Testing Guide<\/strong>, <strong>MASVS<\/strong>, and <strong>OSSTMM<\/strong>. This ensures consistently high quality and the exact repeatability of penetration tests.<\/p>\n\n\n\n<p>In recent years, it has become clear that this structured approach regularly reveals vulnerabilities that were missed in previous tests. One client even stated that they no longer consider earlier assessments from other providers to have been \u201creal\u201d penetration tests.<\/p>\n\n\n\n<p>PTDoc covers all three phases of pentest documentation:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Execution of the test<\/strong> \u2013 systematically working through the defined methodology.<\/li>\n\n\n\n<li><strong>Creation of findings<\/strong> \u2013 including management-level descriptions, detailed technical analysis, risk ratings (qualitatively via traffic-light system or quantitatively via CVSS), and management of screenshots and evidence.<\/li>\n\n\n\n<li><strong>Report generation<\/strong> \u2013 automated creation of a consistent, audit-proof report.<\/li>\n<\/ul>\n\n\n\n<p><strong>Retesting<\/strong> is also integrated: Once a tester verifies that a client has fixed a vulnerability, they simply document the proof of fix in the finding. When rebuilding the report, the issue is automatically marked as remediated, and the management summary is updated accordingly.<\/p>\n\n\n\n<p>In addition, PTDoc supports the creation of <strong>both German and English reports<\/strong>, making it easy to provide clients with deliverables in either language \u2013 or even in both.<\/p>\n\n\n\n<p><strong>Conclusion:<\/strong> With PTDoc, penetration testers can fully focus on their actual work \u2013 conducting the test. At the same time, report creation becomes quick and efficient, ensuring that clients receive their results shortly after the test is completed. And even if it sounds like marketing now: so far, everyone who has started working with it has been absolutely thrilled.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The idea for PTDoc emerged during the growth of our binsec team: How can we keep quality consistently high when individual penetration testers have different personal areas of expertise? And how do you ensure that the result of a pentest is always consistent \u2013 regardless of which Senior Penetration Tester conducts the assessment? Before PTDoc, &#8230; <span class=\"more\"><a class=\"more-link\" href=\"https:\/\/security.sauer.ninja\/en\/binsec\/ptdoc-documentation-and-reporting-for-penetration-tests\/\">[Read more&#8230;]<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"none","_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","footnotes":""},"categories":[227],"tags":[],"class_list":{"0":"entry","1":"post","2":"publish","3":"author-psauer","4":"post-3879","6":"format-standard","7":"category-binsec"},"_links":{"self":[{"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/posts\/3879","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/comments?post=3879"}],"version-history":[{"count":13,"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/posts\/3879\/revisions"}],"predecessor-version":[{"id":4226,"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/posts\/3879\/revisions\/4226"}],"wp:attachment":[{"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/media?parent=3879"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/categories?post=3879"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/tags?post=3879"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}