Dec. 31, 2023, 9:07 p.m. | /u/ascetik

cybersecurity www.reddit.com

Since most pen test reports go directly to developers and/or app owners that don’t have a real security background, I feel the cvss score does not really have any meaning to them. I see the benefit to the assessor to keep a unified vulnerability ranking but just don’t quite see the usefulness of including the score in the report.

app cvss cvss score cybersecurity developers don high low medium pen pen test real reports score security severity test writing

Technical Product Manager, Electronic Warfare - Active Clearance

@ Anduril | Costa Mesa, California, United States

Specialist Operations and Support/ Entry Professional - IT Security, Cyber Security & Governance

@ Norsk Hydro | Jaipur, IN

Embedded Software Engineer, Electronic Warfare

@ Anduril | Costa Mesa, California, United States

Cyber Security Analyst

@ Peraton | Chantilly, VA, United States

Principal Consultant, Proactive Security - Unit 42

@ Palo Alto Networks | Sydney, Australia

Penetration Tester Consultant

@ RSI Security | United States - Remote