> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hacktron.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Findings and reports

> Export pentest findings as CSV, SARIF, or JSON, or download a PDF report.

Open a completed scan in **Whitebox Scans**. Click **View findings** to review
its findings, or use **Download report** at the top of the scan page for a PDF.

## Export findings

**1. Choose the findings**

From the scan, click **View findings** to open the **Findings** page filtered
to that scan. Narrow the list with search or filters such as severity,
status, or repository.

Select checkboxes to export individual findings. Leave them unselected to
export matching findings across all pages.

**2. Choose a format**

Click **Export**, or **Export N selected** if you selected rows, then choose:

* **Download CSV** for spreadsheets
* **Download SARIF** for tools that accept SARIF security results
* **Download JSON** for structured finding data

![Findings Export menu with Download CSV, Download SARIF, and Download JSON options](https://mintcdn.com/hacktronai/ZQyYyaEXc9pNB9Xs/images/whitebox_findings_export.png?fit=max\&auto=format\&n=ZQyYyaEXc9pNB9Xs\&q=85\&s=4a4a22d65ff314175eef18b218db549c)

## Download a report

On the scan page, open **Download report** and choose:

* **Full Whitebox Report** for the detailed assessment and findings, including
  technical evidence and recommendations
* **Executive Report** for a shorter report with the risk assessment, key
  findings, and next steps

Both download as PDFs. The Executive Report is available for completed scans
with findings. If Hacktron needs to prepare its summary, the PDF downloads
when it's ready.

### Example report

The Full Whitebox Report's contents page links to each section and finding.
This example uses sample data.

![Sample Full Whitebox Report contents with executive summary, scope, findings summary, methodology, severity rubric, individual findings, and limitations](https://mintcdn.com/hacktronai/ZQyYyaEXc9pNB9Xs/images/whitebox_report_contents.png?fit=max\&auto=format\&n=ZQyYyaEXc9pNB9Xs\&q=85\&s=cc3084094f410e533384429c77045e98)

## Reports after a retest

After Hacktron completes a [retest](https://docs.hacktron.ai/white-box-pentest/retests.md), **Download
report** has two groups:

* **Original scan**: the report as delivered before the retest
* **After retest**: the updated report with verification results

Choose a report under the group you need. Both updated reports include a retest
summary and updated risk rating. In the full report, fixed findings also have a
**Fix Note** alongside their original technical details.

![Download report menu with Original scan and After retest groups, each offering Full Whitebox Report and Executive Report](https://mintcdn.com/hacktronai/ZQyYyaEXc9pNB9Xs/images/whitebox_retest_reports.png?fit=max\&auto=format\&n=ZQyYyaEXc9pNB9Xs\&q=85\&s=7d318b969b07e0995f69150ddd406ab3)

> [!NOTE]
>
> Some older scans do not have a saved original report or executive summary. If
> the original is unavailable, download the **After retest** edition instead.

For a letter confirming the engagement, [contact us for an attestation
letter](https://docs.hacktron.ai/white-box-pentest/attestation-letters.md).


## Related topics

- [Retests](https://docs.hacktron.ai/white-box-pentest/retests.md)
- [White-box Pentest](https://docs.hacktron.ai/white-box-pentest/overview.md)
- [Findings and feedback](https://docs.hacktron.ai/code-review/findings-feedback.md)
- [Changelog](https://docs.hacktron.ai/changelog.md)
- [Attestation letters](https://docs.hacktron.ai/white-box-pentest/attestation-letters.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.