Crucible — Reports

Report System Overview

Crucible generates over 50 distinct report types organized across 8 scope categories plus cross-scope reports. Reports are built from the combined findings, intelligence, and tool output of your engagement. Each report type focuses on a specific assessment dimension — from PCI DSS compliance to API vulnerability analysis.

Reports are available in HTML (inline viewer) and PDF (generated via Playwright/Chromium). Custom filenames are applied automatically based on the client name, report type, and date.

The Reports panel in the dashboard shows only report types relevant to your engagement's active scopes. If no tools have run for a given scope, that scope's reports won't appear.

Engagement Completion Check

Before generating a report, Crucible checks whether the engagement is complete. If any tools are still running or queued (in the process manager or action item queue), a warning banner appears indicating the report may be incomplete. You can still generate it, but the report will reflect only the data available at that moment.

Endpoint Scope Reports

Reports for endpoint/device assessment scope (Gearbox/Gauntlet findings).

Report	Focus
Disk Encryption Assessment	Storage encryption findings — full disk encryption status, partition-level encryption, removable media policies. Evaluates encryption algorithms, key management, and recovery mechanisms.
Hardware Security Assessment	Physical device security — debug port exposure, JTAG/SWD access, firmware extraction vectors, tamper evidence, secure boot chain analysis.
Software Inventory & Assessment	Installed software enumeration — outdated packages, known vulnerable versions, unnecessary services, license compliance.
Malicious Indicators Assessment	Malware indicators — suspicious processes, unexpected network connections, unauthorized scheduled tasks, rootkit detection results.
NIST Compliance Assessment	Endpoint NIST SP 800-53 control mapping — which controls are satisfied, partially met, or not addressed by the endpoint configuration.
STIG Compliance Assessment	DISA STIG benchmark compliance — per-rule pass/fail with finding severity categories (CAT I/II/III).
CIS Benchmark Assessment	CIS benchmark scoring — per-section compliance percentages with specific failed checks and remediation steps.

External Scope Reports

Reports for external/perimeter testing scope (Scattershot3 findings).

Report	Focus
Vulnerability Assessment	External vulnerability findings organized by risk severity, affected hosts, and service type. Includes CVE mapping, exploit availability, and remediation priorities.
Attack Surface Analysis	External attack surface enumeration — open ports, exposed services, technology fingerprints, certificate issues, and entry points ranked by risk.
PCI DSS Assessment	PCI DSS v4.0 requirement mapping — findings correlated to specific PCI requirements with pass/fail status per requirement section.
Firewall & Segmentation Review	Firewall rule effectiveness — unnecessary exposed services, filtered vs. unfiltered ports, segmentation bypass findings.
Executive Summary	High-level overview for external scope: risk distribution, critical findings, top remediation priorities, timeline context.

OSINT Scope Reports

Reports for OSINT/open-source intelligence scope (OSift findings).

Report	Focus
Threat Intelligence Report	Aggregated OSINT threat intelligence — leaked credentials, dark web mentions, breach database hits, threat actor targeting indicators.
Digital Footprint Analysis	Organization's digital footprint — domain registrations, subdomain enumeration, cloud asset discovery, technology stack exposure.
Email Security Assessment	Email infrastructure — SPF/DKIM/DMARC configuration, email server exposure, harvested email addresses, phishing susceptibility indicators.
DNS Infrastructure Analysis	DNS configuration — zone transfer attempts, record enumeration (A, AAAA, MX, TXT, CNAME, NS), DNS security extensions (DNSSEC), misconfigured records.
Executive Summary	High-level OSINT overview: key exposure findings, credential leak summary, recommended immediate actions.

Internal Scope Reports

Reports for internal network testing scope (Scattershot3 internal scan findings).

Report	Focus
Vulnerability Assessment	Internal vulnerability findings — host-by-host breakdown with service-level detail, lateral movement risks, and privilege escalation paths.
Network Segmentation Review	VLAN effectiveness, inter-segment access, broadcast domain analysis, unauthorized cross-segment communication.
Active Directory Assessment	AD-specific findings — Kerberoasting targets, AS-REP roasting, delegation misconfigurations, password policy evaluation, group policy weaknesses.
SMB/File Share Analysis	SMB share enumeration results — anonymous access, null sessions, sensitive file exposure, SMBv1 usage, signing status.
Executive Summary	High-level internal overview: network topology insights, critical internal findings, recommended segmentation improvements.

Wireless Scope Reports

Reports for wireless testing scope (Aether family findings).

Report	Focus
Wireless Assessment	Comprehensive wireless security — encryption protocol analysis (WEP/WPA/WPA2/WPA3), authentication mechanism review, signal coverage mapping.
WiFi Network Analysis	WiFi-specific findings — rogue access points, evil twin detection, client isolation, SSID broadcast policy, channel overlap analysis.
Rogue Device Detection	Unauthorized wireless devices — rogue APs, unauthorized clients, ad-hoc networks, WiFi Direct connections.
BLE Assessment	Bluetooth Low Energy findings — device enumeration, GATT service analysis, pairing vulnerabilities, characteristic read/write testing.
Executive Summary	High-level wireless overview: airspace summary, critical wireless findings, rogue device count, encryption downgrade risks.

Web Application Scope Reports

Reports for web application testing scope (Fracture findings).

Report	Focus
Vulnerability Assessment	Web vulnerability findings organized by OWASP Top 10 category — injection flaws, broken authentication, security misconfiguration, XSS, etc.
OWASP Top 10 Analysis	Per-category OWASP Top 10 2025 compliance mapping with finding counts, affected endpoints, and category-specific remediation.
Technology Stack Review	Web technology analysis — server software versions, JavaScript frameworks, CMS identification, known vulnerable components, security header evaluation.
Web Discovery Analysis	Content discovery results — hidden directories, backup files, configuration file exposure, administrative interfaces, debug endpoints.
Executive Summary	High-level web overview: application count, critical web vulnerabilities, OWASP category distribution, remediation priorities.

API Scope Reports

Reports for API testing scope (Siphon findings).

Report	Focus
API Vulnerability Assessment	API-specific findings — broken object-level authorization, broken authentication, mass assignment, SSRF, injection, rate limiting gaps.
OWASP API Top 10 Analysis	Per-category OWASP API Top 10 2023 mapping with affected endpoints, HTTP methods, and API-specific remediation guidance.
Executive Summary	High-level API overview: API surface inventory (spec-defined vs. discovered), rogue endpoint count, authentication gap analysis.

Tool-Specific Reports

Reports dedicated to specific tool outputs.

Report	Focus
Trawler Traffic Analysis	Network traffic analysis — protocol breakdown, connection patterns, cleartext credential detection, suspicious traffic indicators from PCAP analysis.
Auger Deep-Dive Report	Extended investigation results — manual verification outcomes, exploitation attempts, proof-of-concept results for findings identified by automated tools.
Bastion Configuration Audit	Infrastructure configuration analysis — firewall rules, OS hardening, service configuration, compliance baseline deviations.
Forge Web Content Analysis	Web content and structure analysis — sitemap, technology stack correlation, content management findings, third-party integration risks.
Quill Documentation Analysis	Documentation and content analysis — exposed API documentation, developer comments, debug information, version disclosure.
Isotope Static Analysis	Static analysis of Nessus/nuclei output — false positive identification, finding deduplication, cross-reference with known-good baselines.

Cross-Scope Reports

Reports that aggregate findings from multiple scopes.

Report	Focus
Remediation Roadmap	Prioritized remediation plan across all scopes — grouped by effort (Easy / Moderate / Significant / Major), remediation component (Application / Network / Authentication / Configuration), and timeline recommendation.
Compliance Matrix	Multi-framework compliance mapping — NIST 800-53, NIST CSF 2.0, PCI DSS 4.0, ISO 27001, SOC 2, HITRUST, GDPR. Shows which findings map to which controls across all frameworks simultaneously.
Unified Executive Summary	Complete engagement executive summary — all scopes combined, overall risk posture, critical findings across all attack surfaces, strategic recommendations.

Full Engagement Report

The Full Report combines all applicable scope reports into a single comprehensive document. It includes executive summary, methodology, scope definition, all scope-specific findings sections, remediation roadmap, and compliance matrix. This is typically the final deliverable.

Generation time depends on engagement size — large engagements with hundreds of findings may take 30–60 seconds for PDF generation.

Export Formats

Each report is available in two formats:

HTML — Opens in an inline viewer within Crucible. Useful for review and sharing within the team. Can be printed from the browser.
PDF — Generated via Playwright/Chromium headless rendering. Produces a professional-quality PDF with proper pagination, headers/footers, and page breaks. Custom filenames follow the pattern: <ClientShort>_<ReportType>_<YYYYMMDD>.pdf.

Crucible Docs

Reports