User guide

This section is task-oriented: how to do the things a pentester and a lead do day to day, once the concepts are clear. It assumes you know the vocabulary from Concepts; where a task turns on a state machine (publication, verification, release), it points back there rather than repeating it.

In this section

• Methodologies and catalogs — import catalogs and adopt frameworks.
• Linking techniques and editing findings — where mappings and compliance come from.
• Evidence and the annotator — capture and redact.
• Clone and retest — reuse a finding, record a retest.
• Releasing a report and its language — generate, release, and deliver.
• Users, roles, permissions — invite accounts and the second factor.