Findings Groups
Findings Groups provide a way to organize findings within an engagement into logical categories. Instead of working from a flat list, Pro users can create groups (such as External, Internal, or Social Engineering) and drag findings into them. This makes it easier to manage large engagements, highlight patterns, and produce reports that clearly communicate risk in context.
Why Use Findings Groups
Organize findings logically – Group findings by environment, test type, or methodology.
Improve readability – Clients can more easily understand findings when they’re presented in structured sections.
Flexible workflow – Groups are optional. Engagements start with a flat list of findings, and groups can be added only if you need them.
Report integration – Groups carry over into reporting, so your exported documents reflect the same structure you set in the engagement.
Creating and Managing Groups
From the Findings page, click Groups to open the group management screen. Here you can:
Add Group – Create a new group and define its Auto ID format.
Edit Group – Rename the group or change its Auto ID.
Reorder Groups – Drag and drop groups to change their order.
Delete Group – Remove a group (findings inside will return to Uncategorized).
Auto IDs
Normally, the Findings page has a single Auto ID format that controls numbering for all findings (e.g., F-##). When groups are created, Auto ID moves to the group level. Each group has its own Auto ID format, which controls how findings in that group are numbered.
Example:
Group External with Auto ID
EX-##will assign IDs likeEX-01,EX-02.Group Internal with Auto ID
IN-##will assign IDs likeIN-01,IN-02.
IDs are automatically updated based on the group’s Auto ID format and the position of the finding within the group.
Uncategorized Findings
When groups are first created, any existing findings are automatically assigned to a special group called Uncategorized. From here you can:
Drag and drop findings into the appropriate group.
Once moved, the finding will be automatically re-ID’d according to the group’s Auto ID and order.
This ensures that every finding belongs to either a specific group or Uncategorized.
Drag and Drop Organization
The Findings page allows you to expand or collapse groups, then drag findings into them. Findings can be freely moved between groups. The system automatically renumbers findings to match the new group’s Auto ID scheme.
Grouped Findings Example
Here you can see findings organized into three groups: External, Internal, and Social Engineering. Each finding has been automatically assigned an ID based on the group’s Auto ID format (e.g., EX-01, IN-02, SE-03). This structure makes it easy to separate findings by scope and ensures numbering remains consistent within each group.
Reporting
Grouped findings carry over into reporting and can be displayed using the findingsGrouped collection in templates. See Working with Grouped Findings for template examples.
Tier Availability
Findings Groups is available on Pro Tier.
Last updated