For the executive
What matters, what to do next, who owns the decision. No unexplained technical score pretending to be business risk.
The reporting standard / Public sample
A report people will actually read.
Evidence they can actually use.

One case. The whole story.
The fictional Aster Vale Financial assessment follows an estate of 46 assets through scope, testing coverage, attack paths, 12 findings and 4 verified fixes. The report gives each audience a useful way into the same evidence.
This is a designed example using entirely synthetic data. No live assessment was performed. It illustrates the reporting standard we are building toward; it is not an ISO certification or a customer assurance opinion.
What matters, what to do next, who owns the decision. No unexplained technical score pretending to be business risk.
Affected boundaries, observed behavior, supporting records and the exact tests that would close each issue.
Selected control mappings, evidence age, scope limitations and a traceable history of review and remediation.
Actual PDF pages / Select to read

Page 04
Material exposure, immediate action and accountable owners.

Page 06
Severity and closure shown separately, with the limits explained.

Page 11
The trust boundary crossed and the point where the evidence stops.

Page 16
Impact, observation, correction and a specific closure test.

Page 30
Selected ISO control references alongside the evidence still needed.
Behind the pages
Download the synthetic observation files, four retest records and an audit-event example. A checksum manifest makes the fixture files independently checkable.
Download sample evidenceAuthored fixtures, not captured traffic. Integrity hashes do not establish that an event occurred.

A living view for the people operating the system. A considered, versioned document for the people making decisions about it. Both should draw from the same evidence.
Get the full reportEdition 1.0 / 22 September 2026 / PDF checksum
Next
Create your workspace now. Bring one application and your reporting requirements. We’ll agree testing cadence, scope and the approvals your organisation needs to activate.