Skip to main content
The Reports page is your library of delivered pentest reports. Open it from Management > Reports in the sidebar. A report appears here once the Borg team delivers it. Delivery also raises a Report delivered entry in your Alert Centre.
Reports produced by an individual Mjolnir run are downloaded from the run itself, not from this page. See Mjolnir runs.

​
The report list

The page has three columns. Pentest Reports holds your delivered reports, newest first. Attack Surface Reports and Summary Reports are placeholders for report types that are not available yet. Each row shows the pentest name (or the client name on a standalone report), the revision number, and the date the report was last updated. A download button sits on the left of the row once the PDF is ready. Until then the row carries a Pending badge instead. Reports use an immutable revision system. When the content changes, say after a retest confirms a fix, Odin creates a new revision rather than editing the existing one. The row always points at the latest revision, and the downloaded file is named after the pentest and that revision, such as Acme Q3 Pentest-rev3.pdf.

​
What is in a report

The PDF opens with a cover page and a table of contents, followed by four parts.

​
Executive summary

  • Confidentiality statement
  • Report overview, the narrative written by the testing team
  • Key findings, a compact table of the headline issues with their severities

​
Findings

  • Vulnerability distribution, with counts by Critical, High, Medium, Low, and Info
  • Master findings table, listing the ID, title, state, and severity of every finding in the report
  • Detailed findings, each with the date it was identified (and resolved, where it has been), its type and CWE reference, severity, status, affected asset, description, business impact, supporting detail, and the suggested fix

​
Appendices

  • Scope and methodology: the assets tested, their type, and the technology identified on each
  • Vulnerability coverage: the vulnerability classes the assessment explicitly checked for
  • Glossary

​
Notices

Legal notices covering tester qualifications, independence, and report authorisation. The wording differs between human-led engagements and autonomous Mjolnir engagements, and reports that carry no notices omit the section.

​
Downloading a report

Use the download button on any row with a ready PDF. Odin generates a short-lived signed link and saves the file straight to your machine. The list also supports keyboard navigation: j and k move the selection, and Enter downloads the focused report.
Odin reports page showing export options

Download a pentest report as PDF from the Reports page

​
Emailing yourself a report

Send to email opens a form where you pick a report and enter a recipient address. The recipient gets a link to the PDF that stops working 24 hours after it is sent, and the email states the expiry date.
You can only send a report to your own email address, the one on your Odin account. Odin rejects any other recipient. To share a report outside Odin, download the PDF and send it yourself.
Sending requires the Member role or above. The button stays disabled until at least one report has a PDF.

​
Exporting the report list

Export downloads the list itself rather than the PDFs, as CSV, Markdown, or JSON. Each row carries the report name, whether a PDF exists, the revision number, and the created and updated timestamps, which is enough to track deliverables in your own systems.