Free penetration testing report templates for OSCP exam reports, web application pentests, network security assessments, internal Active Directory engagements, mobile app testing, and enterprise compliance audits. Every template is available in DOCX and PDF format, ready to fill in and deliver.
Built by pentesters who got tired of formatting reports from scratch. Every template follows OWASP, PTES, and NIST standards so your reports are client-ready and audit-ready without extra work.
The OSCP exam report template updated for the current OSCP+ format. Includes the Active Directory section that older OSCP templates are missing.
- Cover page with OS-ID, email, exam date, and report date fields
- High-level summary with sample text you can adapt
- Methodology sections for information gathering, service enumeration, penetration, post-exploitation, and house cleaning
- 3 independent target sections with Nmap enumeration tables, initial access walkthrough, privilege escalation walkthrough, and proof tables
- Full Active Directory section with 3 machine walkthroughs, lateral movement documentation, and attack chain summary
- Appendix with proof hash summary table, tool and payload listing, and Metasploit usage tracker
- All placeholder text is in red so you can find and replace it during the exam
Guide: How to write an OSCP exam report that passes
A general-purpose penetration testing report template that works for any engagement type. External assessments, vulnerability assessments, security audits, or any other type of pentest.
- Executive summary for non-technical stakeholders
- Scope and methodology with testing approach, tools, and exclusions
- Findings summary table with severity ratings at a glance
- Detailed finding sections with CVSS 3.1 vector strings, evidence placeholders, steps to reproduce, impact analysis, and remediation steps
- Risk ratings using CVSS 3.1 (Critical, High, Medium, Low, Informational)
- Remediation roadmap with prioritized fixes organized by severity and effort
- Appendix for raw tool output, scan data, and supplementary evidence
Penetration testing report template for web application security assessments. Organized around OWASP Top 10 categories so your findings map directly to industry standards.
- OWASP Top 10 aligned finding categories
- HTTP request and response evidence sections
- API testing sections for REST and GraphQL endpoints
- Authentication and session management finding templates
- Input validation and injection finding templates
- Screenshot placeholders for Burp Suite, browser dev tools, and other evidence
Penetration testing report template for external and internal network infrastructure assessments. Built for Nmap-heavy engagements with structured tables for host discovery and service enumeration.
- Host discovery and network mapping tables
- Service enumeration tables organized by host
- Vulnerability findings organized by severity and host
- Network-specific finding categories (misconfigured services, default credentials, unpatched software, weak encryption)
- Nmap output sections and scan result documentation
Penetration testing report template for internal network and Active Directory assessments. Covers the full kill chain from initial access through lateral movement to domain compromise.
- Active Directory enumeration findings
- Attack path documentation with step-by-step chains
- Privilege escalation sections for both Linux and Windows
- Lateral movement documentation (pass-the-hash, Kerberoasting, DCSync, etc.)
- Credential harvesting and password audit findings
- Network segmentation analysis
Penetration testing report template for iOS and Android mobile application security testing. Follows the OWASP Mobile Application Security Testing Guide (MASTG) and maps findings to MASVS categories.
- OWASP MASTG methodology sections
- MASVS category mapping for findings
- Platform-specific sections for iOS and Android
- API backend testing documentation
- Local data storage and encryption analysis sections
- Certificate pinning and transport security findings
A comprehensive enterprise-grade penetration testing report template for consulting firms and large engagements. Includes document control, version history, and compliance-ready structure for SOC 2, PCI DSS, ISO 27001, HIPAA, and GDPR audits.
- Document control with version history and distribution list
- Classification levels and confidentiality markings
- Strategic remediation roadmap with timelines and effort estimates
- Compliance mapping sections for SOC 2, PCI DSS, ISO 27001, HIPAA, GDPR
- Risk matrix visualization
- Retest tracking and verification sections
- Download the DOCX file for the template you need
- Open it in Microsoft Word, Google Docs, or LibreOffice Writer
- Replace the red placeholder text with your own findings, evidence, and recommendations
- Add your screenshots, Nmap output, Burp Suite results, and other evidence
- Export to PDF for delivery to clients or exam submission
For OSCP exam reports specifically, remember to submit as a single PDF file within 24 hours of your exam ending.
templates/
oscp/
oscp-report-template.docx
oscp-report-template.pdf
general/
pentest-report-template.docx
pentest-report-template.pdf
web-app/
web-pentest-report-template.docx
web-pentest-report-template.pdf
network/
network-pentest-report-template.docx
network-pentest-report-template.pdf
internal/
internal-pentest-report-template.docx
internal-pentest-report-template.pdf
mobile/
mobile-pentest-report-template.docx
mobile-pentest-report-template.pdf
enterprise/
professional-pentest-report-template.docx
professional-pentest-report-template.pdf
If you are new to penetration testing reports or want to improve your reporting, these guides cover everything from structure to CVSS scoring:
- How to Write a Penetration Testing Report - complete guide to writing professional pentest reports that communicate risk clearly
- Pentest Report Example with Sample Findings - a full sample report walkthrough with real finding examples you can reference
- OSCP Report Writing Guide - how to write an OSCP exam report that passes, common mistakes that get reports rejected
- CVSS 3.1 Scoring for Pentest Reports - how to score findings using CVSS 3.1 with real-world examples
- OWASP Top 10 Reporting Guide - how to map your pentest findings to OWASP Top 10 categories
- How to Calculate a CVSS Score - step-by-step breakdown of every CVSS 3.1 metric
- Web Application Pentest Report Guide - how to structure a web app pentest report that developers can actually use
- PCI DSS Penetration Testing Report - what QSAs want to see in a PCI DSS pentest report
These templates are maintained by PentestReportAI. If you want to skip the manual formatting entirely, PentestReportAI is an AI-powered pentest report generator that takes your raw findings, Nmap scans, Burp Suite output, or manual notes and generates a complete, professional report in minutes with CVSS 3.1 auto-scoring and five report templates.
Found a mistake or want to improve a template? Open an issue or submit a pull request. If you have a template for a specific engagement type that is not covered here, contributions are welcome.
These templates are free to use, modify, and distribute for personal and commercial purposes. Attribution is appreciated but not required.