A detection is not a finding.
Seccuti re-tests every candidate against the live system before it is reported, and drops what it cannot reproduce. What reaches you is a list someone could act on this afternoon.
What does a finding contain?
Enough for an engineer to reproduce it and a manager to prioritise it, without either having to ask a question.
- Title and severity
- Severity from CVSS v4.0, with the vector recorded so the score can be checked rather than trusted.
- Where
- The exact asset and location. If one issue appears at many locations, they are listed under the one finding.
- Evidence
- The request and the response that demonstrate the issue, captured at the time it was proven.
- Impact
- What it means for this business, in the customer's terms rather than in a generic paragraph.
- Remediation
- What to change, specific to the technology in use.
- Verification state
- Proven, possible, or refuted. A refuted candidate stays on the record rather than quietly disappearing.
One issue is one finding
A host level issue that appears on six ports is one finding with six locations, not six findings. The alternative inflates the count and hides the shape of the problem, and it is the fastest way to lose a reader's trust in a report.
- Within one run
- Duplicate detections of the same issue on the same asset collapse into a single finding.
- Across sources
- The same issue found more than one way merges rather than doubling, and every source that saw it is recorded.
- Across locations
- Each place the issue appears is attached to the finding as an affected location.
- On re-run
- A repeat engagement updates the existing finding rather than opening a second copy.
What language is the report written in?
Turkish or English, set per organization, so the deliverable arrives in the language of the people who will read it rather than the language of whoever started the test.
Can one platform produce both languages?
Yes. The same generator produces the Turkish and the English deliverable from the same engagement, so a firm serving customers in both languages does not keep two report templates in step by hand.
Is the technical vocabulary translated?
Established terms stay as they are read in the industry, inside a sentence written in the reader's language. Finding titles stay stable across languages because they are also identifiers in the findings list and the retest flow.
Read a deliverable before you buy one.
The sample report is the whole document, not an excerpt.