Pen testers and developers

Can anyone offer any advice on how to make the process smoother when dealing with pen test results and developers? Possibly a template to go off of? If a pen tester finds a vulnerability in an app that they consider a high severity but the devs don't think it is, it's a back and forth game it seems.

advice app back cybersecurity developers don game high offer pen pen test process results severity template test testers test results vulnerability