Client Debriefs

Overview

After the penetration test is completed and the report has been written and sent, next is the client debrief.

The client debrief is just you going over the report, either as a PDF or a PowerPoint. You go over the findings at a high level and give them a summary of how and why you got in (again, told in simpler terms).

Penetration Testers are there to educate and find security vulnerabilities before the bad guys do. Inform the client of the vulnerabilities and make recommendations. Be direct to the point and explain things at a high level