mercado.clube67.com/tools/security-auditor/docs/report-pattern.md

Report Pattern

Use this structure for most audits.

Executive summary

• project type
• surfaces reviewed
• top risks
• notable blind spots

Findings

For each finding:

• title
• severity
• confidence
• evidence label
• location
• why it matters
• evidence
• recommended fix
• manual verification

Immediate actions

List the fewest fixes that meaningfully reduce risk first.

This week

List medium-effort hardening tasks.

Later hardening

List defense-in-depth improvements.

Comparison mode

If comparing versions, summarize:

• fixed findings
• reduced risk findings
• unchanged findings
• new regressions