Security Assessment Report
Executive summary, technical findings, attack paths, and the ATT&CK lens. Board-ready.
ADscan PRO · Reporting
From findings to a board-ready report.
One command. 90 seconds. Four client-ready PDFs per engagement.
You found the attack paths. Generate a professional Word and PDF your CISO, board, and auditors can actually read. MITRE mapping, remediation roadmap, and compliance evidence included.
No card. No commitment. Reply time: same day.
Output manifest
Your client deliverable kit
Four artifacts per engagement, each cut for the audience that signs off on it.
documentaudience
CISO · board
AD Hardening Playbook
Remediation by finding ID, with a 30-day plan.
AD Control Coverage Report
Control assurance mapped to ENS Alto, NIS2, ISO 27001, DORA, and PCI DSS.
MITRE ATT&CK Navigator bundle
Interactive HTML view plus the JSON layer for MITRE's own Navigator.
See what each PDF looks like before requesting access.
View samplesProcess
Run. Generate. Deliver.
01
Run ADscan
Enumerate your AD, discover attack paths, and verify vulnerabilities using the open-source CLI.
adscan> connect02
Generate the report
Run "generate report" inside ADscan. Choose compliance frameworks and output format.
adscan> generate report03
Deliver
Share the executive PDF with leadership and the technical report with your remediation team. Same day.
workspace/report.pdfContents
What is inside every report
Six structured sections covering every audience: from the board to the sysadmin who implements the fix.
Executive Summary
Risk posture, critical findings, and business impact in plain language. For CISOs, boards, and non-technical stakeholders.
Attack Path Analysis
Every route from standard user to Domain Admin documented step-by-step. Full kill chain so your team knows exactly what to break.
Vulnerability Findings
Every finding with CVSS score, exploitation evidence, affected assets, and a clear remediation recommendation with effort estimate.
Remediation Roadmap
Prioritized fix list: Quick Wins, Medium Term, Strategic. Includes effort estimates, complexity ratings, and mitigation completeness.
MITRE ATT&CK Mapping
Every finding mapped to ATT&CK technique IDs. Ready to import into your SIEM or share with red/blue team.
Compliance Alignment
Findings mapped to ENS Alto, NIS2 Article 21, ISO 27001, DORA, and PCI DSS. Evidence ready to attach for your next audit.
Output
Two formats, one command
Generated on your machine, from your own engagement, never a template.
- Microsoft Word (.docx)editable, brandable per client
- PDFprint and email ready, no edits needed
- Generated locallynothing sent to the cloud
- Works offlineno API keys, no subscription
- ENS Alto
- NIS2
- ISO 27001
- DORA
- PCI DSS
- MITRE ATT&CK
~/adscan-pro · adscan shell
# Inside the ADscan shell
generate report
Select compliance frameworks:
[x] ENS Alto + NIS2
[ ] ISO 27001:2022
[ ] DORA
Generating report...
Report saved to workspace/report.docx
PDF saved to workspace/report.pdf
Next steps
Ready to generate your first report?
Beta access is free. Use it on a real engagement, share honest feedback. That is the deal.
No card. No commitment. Reply time: same day.
Evaluating ADscan for your organization? Get a demo.