{"format":"attackledger-report/2","generated_at":"2026-10-09T11:56:24.028561+00:00","engagement":{"id":3,"name":"Client web app","type":"pentest","pack":{"id":"web-pentest-wstg","name":"Web application pentest (OWASP WSTG)","version":"0.1","lanes":[{"key":"info","name":"Information gathering"},{"key":"conf","name":"Configuration"},{"key":"idnt","name":"Identity management"},{"key":"athn","name":"Authentication"},{"key":"athz","name":"Authorization"},{"key":"sess","name":"Session management"},{"key":"inpv","name":"Input validation"},{"key":"errh","name":"Error handling"},{"key":"cryp","name":"Cryptography"},{"key":"busl","name":"Business logic"},{"key":"clnt","name":"Client side"},{"key":"apit","name":"API"}]},"policy_url":"https://example.com/statement-of-work","authorized_by":"demo operator","authorized_at":"2026-10-09T08:13:49.190759+00:00","scope":{"include":["api.client.test","app.client.test"],"exclude":[]},"research_identification":{"header":"X-Pentest: client-engagement","user_agent":null},"rate_limit_rps":5,"separation_of_duties":false,"require_signatures":true},"summary":{"hosts_in_scope":2,"lanes_per_host":12,"lanes_possible":24,"lanes_opened":6,"lanes_receipted":5,"lanes_stale":0,"evidence_entries":43,"chain_head":"bc4fcec42ad58bd4f654844a1460084d646efb5269875e120a8703443bbc9e04"},"hosts":[{"host":"api.client.test","in_scope":true},{"host":"app.client.test","in_scope":true}],"lanes":[{"lane_id":6,"host":"api.client.test","role":"info","name":"Information gathering","status":"closed","items":[{"item_id":72,"idx":1,"key":"WSTG-INFO-01","text":"Search engine discovery and reconnaissance for information leakage","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":73,"idx":2,"key":"WSTG-INFO-02","text":"Fingerprint the web server","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":74,"idx":3,"key":"WSTG-INFO-03","text":"Review webserver metafiles for information leakage","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":75,"idx":4,"key":"WSTG-INFO-04","text":"Enumerate applications on the webserver","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":76,"idx":5,"key":"WSTG-INFO-05","text":"Review webpage content for information leakage","state":"na","na_reason":"not present on this host","controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":77,"idx":6,"key":"WSTG-INFO-06","text":"Identify application entry points","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":78,"idx":7,"key":"WSTG-INFO-07","text":"Map execution paths through the application","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":79,"idx":8,"key":"WSTG-INFO-08","text":"Fingerprint the web application framework","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":80,"idx":9,"key":"WSTG-INFO-09","text":"Fingerprint the web application","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":81,"idx":10,"key":"WSTG-INFO-10","text":"Map the application architecture","state":"na","na_reason":"not present on this host","controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]}],"evidence_ids":[53,54,55,56,57,58,59,60],"receipt":{"manifest_sha256":"dc0b0155df6a04c04916c90b4c5f359046c9ea61d9f0af559d320229d3b5529b","closed_by":"Demo Reviewer","issued_at":"2026-10-09T11:19:20.383427+00:00","signature":{"algorithm":"Ed25519","public_key":"MCowBQYDK2VwAyEA3VNcCKmO/Az2pe4C22ws2uXoOJ4/Dz/ILS2OLCtsdf8=","key_fingerprint":"04d6131b52b091033f201537c88e7b13d66abde16d6380f3f8ccb311deac662c","payload":"{\"chain\":{\"head\":\"bc4fcec42ad58bd4f654844a1460084d646efb5269875e120a8703443bbc9e04\",\"seq\":43},\"engagement\":{\"id\":3,\"name\":\"Client web app\"},\"format\":\"attackledger-receipt-v2\",\"issued_at\":\"2026-10-09T11:19:19+00:00\",\"key_fingerprint\":\"04d6131b52b091033f201537c88e7b13d66abde16d6380f3f8ccb311deac662c\",\"lane\":{\"host\":\"api.client.test\",\"id\":6,\"role\":\"info\"},\"manifest_sha256\":\"dc0b0155df6a04c04916c90b4c5f359046c9ea61d9f0af559d320229d3b5529b\",\"signer\":{\"id\":2,\"name\":\"Demo Reviewer\"}}","value":"t/izHqRe9am0YcKiHBOSk8PVrTU7XjBTEFJEhrW8vOQuZ8E2134PY5WWo7D/26sWSct0J8y41uqfS3DhcrCdDQ=="},"timestamp":{"tsa":"http://timestamp.digicert.com","time":"2026-10-09T11:19:20+00:00","token":"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"}}},{"lane_id":5,"host":"app.client.test","role":"info","name":"Information gathering","status":"closed","items":[{"item_id":62,"idx":1,"key":"WSTG-INFO-01","text":"Search engine discovery and reconnaissance for information leakage","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":63,"idx":2,"key":"WSTG-INFO-02","text":"Fingerprint the web server","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":64,"idx":3,"key":"WSTG-INFO-03","text":"Review webserver metafiles for information leakage","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":65,"idx":4,"key":"WSTG-INFO-04","text":"Enumerate applications on the webserver","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":66,"idx":5,"key":"WSTG-INFO-05","text":"Review webpage content for information leakage","state":"na","na_reason":"not present on this host","controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":67,"idx":6,"key":"WSTG-INFO-06","text":"Identify application entry points","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":68,"idx":7,"key":"WSTG-INFO-07","text":"Map execution paths through the application","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":69,"idx":8,"key":"WSTG-INFO-08","text":"Fingerprint the web application framework","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":70,"idx":9,"key":"WSTG-INFO-09","text":"Fingerprint the web application","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":71,"idx":10,"key":"WSTG-INFO-10","text":"Map the application architecture","state":"na","na_reason":"not present on this host","controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]}],"evidence_ids":[45,46,47,48,49,50,51,52],"receipt":{"manifest_sha256":"51c1ec010b939c85aceefab3e30778b10852fded92492b5b089038231fa8a841","closed_by":"Demo Reviewer","issued_at":"2026-10-09T11:19:20.789047+00:00","signature":{"algorithm":"Ed25519","public_key":"MCowBQYDK2VwAyEA3VNcCKmO/Az2pe4C22ws2uXoOJ4/Dz/ILS2OLCtsdf8=","key_fingerprint":"04d6131b52b091033f201537c88e7b13d66abde16d6380f3f8ccb311deac662c","payload":"{\"chain\":{\"head\":\"bc4fcec42ad58bd4f654844a1460084d646efb5269875e120a8703443bbc9e04\",\"seq\":43},\"engagement\":{\"id\":3,\"name\":\"Client web app\"},\"format\":\"attackledger-receipt-v2\",\"issued_at\":\"2026-10-09T11:19:20+00:00\",\"key_fingerprint\":\"04d6131b52b091033f201537c88e7b13d66abde16d6380f3f8ccb311deac662c\",\"lane\":{\"host\":\"app.client.test\",\"id\":5,\"role\":\"info\"},\"manifest_sha256\":\"51c1ec010b939c85aceefab3e30778b10852fded92492b5b089038231fa8a841\",\"signer\":{\"id\":2,\"name\":\"Demo Reviewer\"}}","value":"iV5i+QnHvT64mgFJYLyrGSlv0jLnLZqbWDLp03fDsjPyqu2UrayH+xVyjJ5n2lk1/cmg/kFnjKDpDvLLrAtzAQ=="},"timestamp":{"tsa":"http://timestamp.digicert.com","time":"2026-10-09T11:19:20+00:00","token":"MIIXaQYJKoZIhvcNAQcCoIIXWjCCF1YCAQMxDzANBglghkgBZQMEAgEFADCBgQYLKoZIhvcNAQkQAQSgcgRwMG4CAQEGCWCGSAGG/WwHATAxMA0GCWCGSAFlAwQCAQUABCAIu3a5iSDp93yx0WSB7ebHDxY++tktW7jqdM7qf+CMhgIQIDu8XcPQIo9mk/NGOpG4IxgPMjAyNjEwMDkxMTE5MjBaAggc5W42WMcc26CCEzowggbtMIIE1aADAgECAhAIT9wzT35FTtvDD4/5khg1MA0GCSqGSIb3DQEBCwUAMGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UEAxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBUaW1lU3RhbXBpbmcgUlNBNDA5NiBTSEEyNTYgMjAyNSBDQTEwHhcNMjYwODA1MDAwMDAwWhcNMzcxMTA0MjM1OTU5WjBjMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xOzA5BgNVBAMTMkRpZ2lDZXJ0IFNIQTI1NiBSU0E0MDk2IFRpbWVzdGFtcCBSZXNwb25kZXIgMjAyNiAxMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtnum8sn+zUr41JtMZbP9OMYw+HwJDpG5xkIu/lqcfNYmMX81YmsUiHLbh9ykpeWBGKTLhYBrAN9Tdg/QEzG32XcObmgIblnr0CoQ3WSAeDZ6nH6X6VkFyYkJw3QBJREwvm4UhLzSxmwPA7cFKRTEOMsmEEj6qJk/dqLEAL+oQYuOwE2UuiX1Vnul8YReIyWd4kgLn9gq6LNXM0UplkR6jL/QHxmb6fMoGBJYbnaUI7XD6cKDpekK2SVMld4iDbzeHDtOaaxldH5IxuNusQ69nd8/ZXEiB5Hbxj3RlK13cX1W4DlFXKdv/CEhM8Cj1vvlmvhNroyPdRGbbpBlgyf8Wdu5N6ByhFwURn0U6ozlPoxN22v+fviUhP+6DR547OZnpBMWDfei1f5sVGwiiW/KQTWOK97g+4RJpPzPNV4VYMAwO2jM2Aty2QYPVmOQTJm0msuXnJrSbl2gf9JylpkJlWXqk1Q4LJsxz+TELoQCZIljbgvTJgoPU2R12ydv8i1UqL/adelA0y7U9Pmmtbze9Xx3rtajC5SzQd1jgfwAwsa90v9YcSPdmeoyoBBA/27cCL237l5DTYYPDLQ4ON3OLTGWnvRb6jDrf/T75gMRfUzSLCBQfBusm9+mSWRlC/Df6S/e9Q8i13CuhzOT2Jx+V/nlbXM4QoBwlUAhelwwJT0CAwEAAaOCAZUwggGRMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFBTJY4owLtRK+26U8+bjQH717M3iMB8GA1UdIwQYMBaAFO9vU0rp5AZ8esrikFb2L9RJ7MtOMA4GA1UdDwEB/wQEAwIHgDAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDCBlQYIKwYBBQUHAQEEgYgwgYUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBdBggrBgEFBQcwAoZRaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0VGltZVN0YW1waW5nUlNBNDA5NlNIQTI1NjIwMjVDQTEuY3J0MF8GA1UdHwRYMFYwVKBSoFCGTmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRHNFRpbWVTdGFtcGluZ1JTQTQwOTZTSEEyNTYyMDI1Q0ExLmNybDAgBgNVHSAEGTAXMAgGBmeBDAEEAjALBglghkgBhv1sBwEwDQYJKoZIhvcNAQELBQADggIBAI3FOmEenVIK35msCYB+fShAsWvSYvLBItoNdAgQ2jIqrGsVsluXMJU/+mRebBc52s6lbKAvOVPXaizmKkMLLflEEKDZQx4CkS2t8aHPjkXha3hYZ010htFa3dhNgmalH5vuWvh3tTCf4frTS7gPtGc4Z/xaPhQ2AB1mR8eEe/WbH0RWHvVIl6VwQ3+g5FKNfN2N/DWJkf13w2H+2GfqEfbd35Ww8CvoYBjLNIDTadcPWdgsjsiOaK/7EsKJgLjUNIVgvcaFOLLQ/GlrA+0ZHJoFUbOr5SJN8zykPspXIXlpDJY/gqFUZRROeab9GVgmhbdOJcD/63RhxPahFUGbckRONqMe6DYAv6/mOG0pWd3cPStsdcS7buj5DyniwRY8yooMH6ptx5vpP/pZzBPBeZD2U4IsthyxB5Jaa8qrOkB5z160TXiM5ADMspZ0TfD9MJoq0tFpFPssKRFhWeEDYPvcUuN7U7lvcdHl4ezQ3NT/7Ffs1sR1yh/LRbdZ3B3Vc6q2WmD8mDC0p9kzl2o73iVtS946IkEj7FkRsZGww1teYxERROC745xrtjvcw9ZyyUjHZWGRIpJeMNsPquCDf0fkyHtB+J4AiNZqCQk23rxh+KbpyMTNVKItJ5l92Svl20U9NbqMBOVYl1h54NEYLJq1/xHWFKPNK903zJZA9P2DMIIGtDCCBJygAwIBAgIQDcesVwX/IZkuQEMiDDpJhjANBgkqhkiG9w0BAQsFADBiMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwHhcNMjUwNTA3MDAwMDAwWhcNMzgwMTE0MjM1OTU5WjBpMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xQTA/BgNVBAMTOERpZ2lDZXJ0IFRydXN0ZWQgRzQgVGltZVN0YW1waW5nIFJTQTQwOTYgU0hBMjU2IDIwMjUgQ0ExMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtHgx0wqYQXK+PEbAHKx126NGaHS0URedTa2NDZS1mZaDLFTtQ2oRjzUXMmxCqvkbsDpz4aH+qbxeLho8I6jY3xL1IusLopuW2qftJYJaDNs1+JH7Z+QdSKWM06qchUP+AbdJgMQB3h2DZ0Mal5kYp77jYMVQXSZH++0trj6Ao+xh/AS7sQRuQL37QXbDhAktVJMQbzIBHYJBYgzWIjk8eDrYhXDEpKk7RdoX0M980EpLtlrNyHw0Xm+nt5pnYJU3Gmq6bNMI1I7Gb5IBZK4ivbVCiZv7PNBYqHEpNVWC2ZQ8BbfnFRQVESYOszFI2Wv82wnJRfN20VRS3hpLgIR4hjzL0hpoYGk81coWJ+KdPvMvaB0WkE/2qHxJ0ucS638ZxqU14lDnki7CcoKCz6eum5A19WZQHkqUJfdkDjHkccpL6uoG8pbF0LJAQQZxst7VvwDDjAmSFTUms+wV/FbWBqi7fTJnjq3hj0XbQcd8hjj/q8d6ylgxCZSKi17yVp2NL+cnT6Toy+rN+nM8M7LnLqCrO2JP3oW//1sfuZDKiDEb1AQ8es9Xr/u6bDTnYCTKIsDq1BtmXUqEG1NqzJKS4kOmxkYp2WyODi7vQTCBZtVFJfVZ3j7OgWmnhFr4yUozZtqgPrHRVHhGNKlYzyjlroPxul+bgIspzOwbtmsgY1MCAwEAAaOCAV0wggFZMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFO9vU0rp5AZ8esrikFb2L9RJ7MtOMB8GA1UdIwQYMBaAFOzX44LScV1kTN8uZz/nupiuHA9PMA4GA1UdDwEB/wQEAwIBhjATBgNVHSUEDDAKBggrBgEFBQcDCDB3BggrBgEFBQcBAQRrMGkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBBBggrBgEFBQcwAoY1aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZFJvb3RHNC5jcnQwQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZFJvb3RHNC5jcmwwIAYDVR0gBBkwFzAIBgZngQwBBAIwCwYJYIZIAYb9bAcBMA0GCSqGSIb3DQEBCwUAA4ICAQAXzvsWgBz+Bz0RdnEwvb4LyLU0pn/N0IfFiBowf0/Dm1wGc/Do7oVMY2mhXZXjDNJQa8j00DNqhCT3t+s8G0iP5kvN2n7Jd2E4/iEIUBO41P5F448rSYJ59Ib61eoalhnd6ywFLerycvZTAz40y8S4F3/a+Z1jEMK/DMm/axFSgoR8n6c3nuZB9BfBwAQYK9FHaoq2e26MHvVY9gCDA/JYsq7pGdogP8HRtrYfctSLANEBfHU16r3J05qX3kId+ZOczgj5kjatVB+NdADVZKON/gnZruMvNYY2o1f4MXRJDMdTSlOLh0HCn2cQLwQCqjFbqrXuvTPSegOOzr4EWj7PtspIHBldNE2K9i697cvaiIo2p61Ed2p8xMJb82Yosn0z4y25xUbI7GIN/TpVfHIqQ6Ku/qjTY6hc3hsXMrS+U0yy+GWqAXam4ToWd2UQ1KYT70kZjE4YtL8Pbzg0c1ugMZyZZd/BdHLiRu7hAWE6bTEm4XYRkA6Tl4KSFLFk43esaUeqGkH/wyW4N7OigizwJWeukcyIPbAvjSabnf7+Pu0VrFgoiovRDiyx3zEdmcif/sYQsfch28bZeUz2rtY/9TCA6TD8dC3JE3rYkrhLULy7Dc90G6e8BlqmyIjlgp2+VqsS9/wQD7yFylIz0scmbKvFoW2jNrbM1pD2T7m3XDCCBY0wggR1oAMCAQICEA6bGI750C3n79tQ4ghAGFowDQYJKoZIhvcNAQEMBQAwZTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNlcnQgQXNzdXJlZCBJRCBSb290IENBMB4XDTIyMDgwMTAwMDAwMFoXDTMxMTEwOTIzNTk1OVowYjELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEhMB8GA1UEAxMYRGlnaUNlcnQgVHJ1c3RlZCBSb290IEc0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv+aQc2jeu+RdSjwwIjBpM+zCpyUuySE98orYWcLhKac9WKt2ms2uexuEDcQwH/MbpDgW61bGl20dq7J58soR0uRf1gU8Ug9SH8aeFaV+vp+pVxZZVXKvaJNwwrK6dZlqczKU0RBEEC7fgvMHhOZ0O21x4i0MG+4g1ckgHWMpLc7sXk7Ik/ghYZs06wXGXuxbGrzryc/NrDRAX7F6Zu53yEioZldXn1RYjgwrt0+nMNlW7sp7XeOtyU9e5TXnMcvak17cjo+A2raRmECQecN4x7axxLVqGDgDEI3Y1DekLgV9iPWCPhCRcKtVgkEy19sEcypukQF8IUzUvK4bA3VdeGbZOjFEmjNAvwjXWkmkwuapoGfdpCe8oU85tRFYF/ckXEaPZPfBaYh2mHY9WV1CdoeJl2l6SPDgohIbZpp0yt5LHucOY67m1O+SkjqePdwA5EUlibaaRBkrfsCUtNJhbesz2cXfSwQAzH0clcOP9yGyshG3u3/y1YxwLEFgqrFjGESVGnZifvaAsPvoZKYz0YkH4b235kOkGLimdwHhD5QMIR2yVCkliWzlDlJRR3S+Jqy2QXXeeqxfjT/JvNNBERJb5RBQ6zHFynIWIgnffEx1P2PsIV/EIFFrb7GrhotPwtZFX50g/KEexcCPorF+CiaZ9eRpL5gdLfXZqbId5RsCAwEAAaOCATowggE2MA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFOzX44LScV1kTN8uZz/nupiuHA9PMB8GA1UdIwQYMBaAFEXroq/0ksuCMS1Ri6enIZ3zbcgPMA4GA1UdDwEB/wQEAwIBhjB5BggrBgEFBQcBAQRtMGswJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBDBggrBgEFBQcwAoY3aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJlZElEUm9vdENBLmNydDBFBgNVHR8EPjA8MDqgOKA2hjRodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURSb290Q0EuY3JsMBEGA1UdIAQKMAgwBgYEVR0gADANBgkqhkiG9w0BAQwFAAOCAQEAcKC/Q1xV5zhfoKN0Gz22Ftf3v1cHvZqsoYcs7IVeqRq7IviHGmlUIu2kiHdtvRoU9BNKei8ttzjv9P+Aufih9/Jy3iS8UgPITtAq3votVs/59PesMHqai7Je1M/RQ0SbQyHrlnKhSLSZy51PpwYDE3cnRNTnf+hZqPC/Lwum6fI0POz3A8eHqNJMQBk1RmppVLC4oVaO7KTVPeix3P0c2PR3WlxUjG/voVA9/HYJaISfb8rbII01YBwCA8sgsKxYoA5AY8WYIsGyWfVVa88nq2x2zm8jLfR+cWojayL/ErhULSd+2DrZ8LaHlv1b0VysGMNNn3O3AamfV6peKOK5lDGCA3wwggN4AgEBMH0waTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMUEwPwYDVQQDEzhEaWdpQ2VydCBUcnVzdGVkIEc0IFRpbWVTdGFtcGluZyBSU0E0MDk2IFNIQTI1NiAyMDI1IENBMQIQCE/cM09+RU7bww+P+ZIYNTANBglghkgBZQMEAgEFAKCB0TAaBgkqhkiG9w0BCQMxDQYLKoZIhvcNAQkQAQQwHAYJKoZIhvcNAQkFMQ8XDTI2MTAwOTExMTkyMFowKwYLKoZIhvcNAQkQAgwxHDAaMBgwFgQUUdmr2gNJc9hPQmaspIJI5rNpxDkwLwYJKoZIhvcNAQkEMSIEILT07mYnO67K8k2rCWyHs0ce4FUcjp/wbK7+3Cgrg9/tMDcGCyqGSIb3DQEJEAIvMSgwJjAkMCIEIC2gnaf0Ex+f5y22xebpyWVnVa8EPx6nQswNISDhQev8MA0GCSqGSIb3DQEBAQUABIICAHF0DWsTTTxc/fPq1t5F396fI/CFSkgCgMr5CWN+a++iedREC3M/BkvNjLNaSUczNN0JFe9TMOC9N/hllO8VEY3sEP6QMSwHIGXu/gTmTo+f3XYWybL8LajPvQn2PZeqXdkN7AGu/YyjIVufXwxCGLe5zrmh/RlxstxxTz3S3MobiP+B+zKpjWqhY8m6zGxWS06J66zi5JugF3CuoCNvq7SU5aygmI4OXczhJNq0LZM5UBgN8LtLIBdERbK+upgytpanGTwffJyp2GPnRwgWbIFv1k5MIXn7i+e4HNKcSTxyD6D2vDGtkB7SwZRtX3tzTwL0ZXGjMBF4rxGGyNh85s+4+ZYz2ZlAetfBBCWAPF7GhAhFgVN70CHZSCAyDZzFw2uNAiCCKt3StKnrJMNZ1ML4oJcihAr65EGJ24MXUbW6PQ8vBkFVp5xDZ0lumUKWZXr07A9NOcYtKRsKcWDivtY2mzXGmQtdAij8sCJb4/+bMPIBL5bbB9ksX5XtnjIkLWe5V4jISLLx7XyzUbQja+WPWO6fQBNqJBROVtNa4cdpbWI5TLwtvNupPMpU+cpIKORLyutvGu9dpTSi1e5tqiOhCL4FlSW/S+79TOIhSIvfqMkEmZZZmszVpPwV26nmVp65rTlb5ZN65NqVdmCS9Y6xvggkUN61dkQyz4anHK6G"}}},{"lane_id":7,"host":"app.client.test","role":"conf","name":"Configuration","status":"closed","items":[{"item_id":82,"idx":1,"key":"WSTG-CONF-01","text":"Test network infrastructure configuration","state":"done","na_reason":null,"controls":["ISO-A.8.9","PCI-11.4.3"]},{"item_id":83,"idx":2,"key":"WSTG-CONF-02","text":"Test application platform configuration","state":"done","na_reason":null,"controls":["ISO-A.8.9","PCI-11.4.3"]},{"item_id":84,"idx":3,"key":"WSTG-CONF-03","text":"Test file extension handling for sensitive information","state":"done","na_reason":null,"controls":["ISO-A.8.9","PCI-11.4.3"]},{"item_id":85,"idx":4,"key":"WSTG-CONF-04","text":"Review old backup and unreferenced files","state":"done","na_reason":null,"controls":["ISO-A.8.9","PCI-11.4.3"]},{"item_id":86,"idx":5,"key":"WSTG-CONF-05","text":"Enumerate infrastructure and application admin interfaces","state":"na","na_reason":"not present on this host","controls":["ISO-A.8.9","PCI-11.4.3"]},{"item_id":87,"idx":6,"key":"WSTG-CONF-06","text":"Test HTTP methods","state":"done","na_reason":null,"controls":["ISO-A.8.9","PCI-11.4.3"]},{"item_id":88,"idx":7,"key":"WSTG-CONF-07","text":"Test HTTP Strict Transport Security","state":"done","na_reason":null,"controls":["ISO-A.8.9","PCI-11.4.3","ISO-A.8.24"]},{"item_id":89,"idx":8,"key":"WSTG-CONF-08","text":"Test RIA cross-domain policy","state":"done","na_reason":null,"controls":["ISO-A.8.9","PCI-11.4.3"]},{"item_id":90,"idx":9,"key":"WSTG-CONF-09","text":"Test file permissions","state":"done","na_reason":null,"controls":["ISO-A.8.9","PCI-11.4.3"]},{"item_id":91,"idx":10,"key":"WSTG-CONF-10","text":"Test for subdomain takeover","state":"na","na_reason":"not present on this host","controls":["ISO-A.8.9","PCI-11.4.3"]},{"item_id":92,"idx":11,"key":"WSTG-CONF-11","text":"Test cloud storage","state":"done","na_reason":null,"controls":["ISO-A.8.9","PCI-11.4.3"]}],"evidence_ids":[61,62,63,64,65,66,67,68,69],"receipt":{"manifest_sha256":"6c6025a25ba6ec2d9e9fc4853141c4f4a1857df7bfb1d6d394a0408726a58cb1","closed_by":"Demo Reviewer","issued_at":"2026-10-09T11:19:21.189931+00:00","signature":{"algorithm":"Ed25519","public_key":"MCowBQYDK2VwAyEA3VNcCKmO/Az2pe4C22ws2uXoOJ4/Dz/ILS2OLCtsdf8=","key_fingerprint":"04d6131b52b091033f201537c88e7b13d66abde16d6380f3f8ccb311deac662c","payload":"{\"chain\":{\"head\":\"bc4fcec42ad58bd4f654844a1460084d646efb5269875e120a8703443bbc9e04\",\"seq\":43},\"engagement\":{\"id\":3,\"name\":\"Client web app\"},\"format\":\"attackledger-receipt-v2\",\"issued_at\":\"2026-10-09T11:19:20+00:00\",\"key_fingerprint\":\"04d6131b52b091033f201537c88e7b13d66abde16d6380f3f8ccb311deac662c\",\"lane\":{\"host\":\"app.client.test\",\"id\":7,\"role\":\"conf\"},\"manifest_sha256\":\"6c6025a25ba6ec2d9e9fc4853141c4f4a1857df7bfb1d6d394a0408726a58cb1\",\"signer\":{\"id\":2,\"name\":\"Demo Reviewer\"}}","value":"6Y2ZQaOfs/pujskne7FdYMS1vO43IoMaaK1DRo6KqTFeVbAQxwSq/Fkb2iGatcrwTqAzHP7JBjWuCFoODKoKBQ=="},"timestamp":{"tsa":"http://timestamp.digicert.com","time":"2026-10-09T11:19:21+00:00","token":"MIIXaQYJKoZIhvcNAQcCoIIXWjCCF1YCAQMxDzANBglghkgBZQMEAgEFADCBgQYLKoZIhvcNAQkQAQSgcgRwMG4CAQEGCWCGSAGG/WwHATAxMA0GCWCGSAFlAwQCAQUABCBU4nx5/Vs7L+v5v5Uni9OaUMPMARrH7awnzqfxlj+1DgIRAM1tI9MGTR1K4LHSjawhguQYDzIwMjYxMDA5MTExOTIxWgIHQRr+GuTvy6CCEzowggbtMIIE1aADAgECAhAIT9wzT35FTtvDD4/5khg1MA0GCSqGSIb3DQEBCwUAMGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UEAxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBUaW1lU3RhbXBpbmcgUlNBNDA5NiBTSEEyNTYgMjAyNSBDQTEwHhcNMjYwODA1MDAwMDAwWhcNMzcxMTA0MjM1OTU5WjBjMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xOzA5BgNVBAMTMkRpZ2lDZXJ0IFNIQTI1NiBSU0E0MDk2IFRpbWVzdGFtcCBSZXNwb25kZXIgMjAyNiAxMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtnum8sn+zUr41JtMZbP9OMYw+HwJDpG5xkIu/lqcfNYmMX81YmsUiHLbh9ykpeWBGKTLhYBrAN9Tdg/QEzG32XcObmgIblnr0CoQ3WSAeDZ6nH6X6VkFyYkJw3QBJREwvm4UhLzSxmwPA7cFKRTEOMsmEEj6qJk/dqLEAL+oQYuOwE2UuiX1Vnul8YReIyWd4kgLn9gq6LNXM0UplkR6jL/QHxmb6fMoGBJYbnaUI7XD6cKDpekK2SVMld4iDbzeHDtOaaxldH5IxuNusQ69nd8/ZXEiB5Hbxj3RlK13cX1W4DlFXKdv/CEhM8Cj1vvlmvhNroyPdRGbbpBlgyf8Wdu5N6ByhFwURn0U6ozlPoxN22v+fviUhP+6DR547OZnpBMWDfei1f5sVGwiiW/KQTWOK97g+4RJpPzPNV4VYMAwO2jM2Aty2QYPVmOQTJm0msuXnJrSbl2gf9JylpkJlWXqk1Q4LJsxz+TELoQCZIljbgvTJgoPU2R12ydv8i1UqL/adelA0y7U9Pmmtbze9Xx3rtajC5SzQd1jgfwAwsa90v9YcSPdmeoyoBBA/27cCL237l5DTYYPDLQ4ON3OLTGWnvRb6jDrf/T75gMRfUzSLCBQfBusm9+mSWRlC/Df6S/e9Q8i13CuhzOT2Jx+V/nlbXM4QoBwlUAhelwwJT0CAwEAAaOCAZUwggGRMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFBTJY4owLtRK+26U8+bjQH717M3iMB8GA1UdIwQYMBaAFO9vU0rp5AZ8esrikFb2L9RJ7MtOMA4GA1UdDwEB/wQEAwIHgDAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDCBlQYIKwYBBQUHAQEEgYgwgYUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBdBggrBgEFBQcwAoZRaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0VGltZVN0YW1waW5nUlNBNDA5NlNIQTI1NjIwMjVDQTEuY3J0MF8GA1UdHwRYMFYwVKBSoFCGTmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRHNFRpbWVTdGFtcGluZ1JTQTQwOTZTSEEyNTYyMDI1Q0ExLmNybDAgBgNVHSAEGTAXMAgGBmeBDAEEAjALBglghkgBhv1sBwEwDQYJKoZIhvcNAQELBQADggIBAI3FOmEenVIK35msCYB+fShAsWvSYvLBItoNdAgQ2jIqrGsVsluXMJU/+mRebBc52s6lbKAvOVPXaizmKkMLLflEEKDZQx4CkS2t8aHPjkXha3hYZ010htFa3dhNgmalH5vuWvh3tTCf4frTS7gPtGc4Z/xaPhQ2AB1mR8eEe/WbH0RWHvVIl6VwQ3+g5FKNfN2N/DWJkf13w2H+2GfqEfbd35Ww8CvoYBjLNIDTadcPWdgsjsiOaK/7EsKJgLjUNIVgvcaFOLLQ/GlrA+0ZHJoFUbOr5SJN8zykPspXIXlpDJY/gqFUZRROeab9GVgmhbdOJcD/63RhxPahFUGbckRONqMe6DYAv6/mOG0pWd3cPStsdcS7buj5DyniwRY8yooMH6ptx5vpP/pZzBPBeZD2U4IsthyxB5Jaa8qrOkB5z160TXiM5ADMspZ0TfD9MJoq0tFpFPssKRFhWeEDYPvcUuN7U7lvcdHl4ezQ3NT/7Ffs1sR1yh/LRbdZ3B3Vc6q2WmD8mDC0p9kzl2o73iVtS946IkEj7FkRsZGww1teYxERROC745xrtjvcw9ZyyUjHZWGRIpJeMNsPquCDf0fkyHtB+J4AiNZqCQk23rxh+KbpyMTNVKItJ5l92Svl20U9NbqMBOVYl1h54NEYLJq1/xHWFKPNK903zJZA9P2DMIIGtDCCBJygAwIBAgIQDcesVwX/IZkuQEMiDDpJhjANBgkqhkiG9w0BAQsFADBiMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwHhcNMjUwNTA3MDAwMDAwWhcNMzgwMTE0MjM1OTU5WjBpMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xQTA/BgNVBAMTOERpZ2lDZXJ0IFRydXN0ZWQgRzQgVGltZVN0YW1waW5nIFJTQTQwOTYgU0hBMjU2IDIwMjUgQ0ExMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtHgx0wqYQXK+PEbAHKx126NGaHS0URedTa2NDZS1mZaDLFTtQ2oRjzUXMmxCqvkbsDpz4aH+qbxeLho8I6jY3xL1IusLopuW2qftJYJaDNs1+JH7Z+QdSKWM06qchUP+AbdJgMQB3h2DZ0Mal5kYp77jYMVQXSZH++0trj6Ao+xh/AS7sQRuQL37QXbDhAktVJMQbzIBHYJBYgzWIjk8eDrYhXDEpKk7RdoX0M980EpLtlrNyHw0Xm+nt5pnYJU3Gmq6bNMI1I7Gb5IBZK4ivbVCiZv7PNBYqHEpNVWC2ZQ8BbfnFRQVESYOszFI2Wv82wnJRfN20VRS3hpLgIR4hjzL0hpoYGk81coWJ+KdPvMvaB0WkE/2qHxJ0ucS638ZxqU14lDnki7CcoKCz6eum5A19WZQHkqUJfdkDjHkccpL6uoG8pbF0LJAQQZxst7VvwDDjAmSFTUms+wV/FbWBqi7fTJnjq3hj0XbQcd8hjj/q8d6ylgxCZSKi17yVp2NL+cnT6Toy+rN+nM8M7LnLqCrO2JP3oW//1sfuZDKiDEb1AQ8es9Xr/u6bDTnYCTKIsDq1BtmXUqEG1NqzJKS4kOmxkYp2WyODi7vQTCBZtVFJfVZ3j7OgWmnhFr4yUozZtqgPrHRVHhGNKlYzyjlroPxul+bgIspzOwbtmsgY1MCAwEAAaOCAV0wggFZMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFO9vU0rp5AZ8esrikFb2L9RJ7MtOMB8GA1UdIwQYMBaAFOzX44LScV1kTN8uZz/nupiuHA9PMA4GA1UdDwEB/wQEAwIBhjATBgNVHSUEDDAKBggrBgEFBQcDCDB3BggrBgEFBQcBAQRrMGkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBBBggrBgEFBQcwAoY1aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZFJvb3RHNC5jcnQwQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZFJvb3RHNC5jcmwwIAYDVR0gBBkwFzAIBgZngQwBBAIwCwYJYIZIAYb9bAcBMA0GCSqGSIb3DQEBCwUAA4ICAQAXzvsWgBz+Bz0RdnEwvb4LyLU0pn/N0IfFiBowf0/Dm1wGc/Do7oVMY2mhXZXjDNJQa8j00DNqhCT3t+s8G0iP5kvN2n7Jd2E4/iEIUBO41P5F448rSYJ59Ib61eoalhnd6ywFLerycvZTAz40y8S4F3/a+Z1jEMK/DMm/axFSgoR8n6c3nuZB9BfBwAQYK9FHaoq2e26MHvVY9gCDA/JYsq7pGdogP8HRtrYfctSLANEBfHU16r3J05qX3kId+ZOczgj5kjatVB+NdADVZKON/gnZruMvNYY2o1f4MXRJDMdTSlOLh0HCn2cQLwQCqjFbqrXuvTPSegOOzr4EWj7PtspIHBldNE2K9i697cvaiIo2p61Ed2p8xMJb82Yosn0z4y25xUbI7GIN/TpVfHIqQ6Ku/qjTY6hc3hsXMrS+U0yy+GWqAXam4ToWd2UQ1KYT70kZjE4YtL8Pbzg0c1ugMZyZZd/BdHLiRu7hAWE6bTEm4XYRkA6Tl4KSFLFk43esaUeqGkH/wyW4N7OigizwJWeukcyIPbAvjSabnf7+Pu0VrFgoiovRDiyx3zEdmcif/sYQsfch28bZeUz2rtY/9TCA6TD8dC3JE3rYkrhLULy7Dc90G6e8BlqmyIjlgp2+VqsS9/wQD7yFylIz0scmbKvFoW2jNrbM1pD2T7m3XDCCBY0wggR1oAMCAQICEA6bGI750C3n79tQ4ghAGFowDQYJKoZIhvcNAQEMBQAwZTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNlcnQgQXNzdXJlZCBJRCBSb290IENBMB4XDTIyMDgwMTAwMDAwMFoXDTMxMTEwOTIzNTk1OVowYjELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEhMB8GA1UEAxMYRGlnaUNlcnQgVHJ1c3RlZCBSb290IEc0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv+aQc2jeu+RdSjwwIjBpM+zCpyUuySE98orYWcLhKac9WKt2ms2uexuEDcQwH/MbpDgW61bGl20dq7J58soR0uRf1gU8Ug9SH8aeFaV+vp+pVxZZVXKvaJNwwrK6dZlqczKU0RBEEC7fgvMHhOZ0O21x4i0MG+4g1ckgHWMpLc7sXk7Ik/ghYZs06wXGXuxbGrzryc/NrDRAX7F6Zu53yEioZldXn1RYjgwrt0+nMNlW7sp7XeOtyU9e5TXnMcvak17cjo+A2raRmECQecN4x7axxLVqGDgDEI3Y1DekLgV9iPWCPhCRcKtVgkEy19sEcypukQF8IUzUvK4bA3VdeGbZOjFEmjNAvwjXWkmkwuapoGfdpCe8oU85tRFYF/ckXEaPZPfBaYh2mHY9WV1CdoeJl2l6SPDgohIbZpp0yt5LHucOY67m1O+SkjqePdwA5EUlibaaRBkrfsCUtNJhbesz2cXfSwQAzH0clcOP9yGyshG3u3/y1YxwLEFgqrFjGESVGnZifvaAsPvoZKYz0YkH4b235kOkGLimdwHhD5QMIR2yVCkliWzlDlJRR3S+Jqy2QXXeeqxfjT/JvNNBERJb5RBQ6zHFynIWIgnffEx1P2PsIV/EIFFrb7GrhotPwtZFX50g/KEexcCPorF+CiaZ9eRpL5gdLfXZqbId5RsCAwEAAaOCATowggE2MA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFOzX44LScV1kTN8uZz/nupiuHA9PMB8GA1UdIwQYMBaAFEXroq/0ksuCMS1Ri6enIZ3zbcgPMA4GA1UdDwEB/wQEAwIBhjB5BggrBgEFBQcBAQRtMGswJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBDBggrBgEFBQcwAoY3aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJlZElEUm9vdENBLmNydDBFBgNVHR8EPjA8MDqgOKA2hjRodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURSb290Q0EuY3JsMBEGA1UdIAQKMAgwBgYEVR0gADANBgkqhkiG9w0BAQwFAAOCAQEAcKC/Q1xV5zhfoKN0Gz22Ftf3v1cHvZqsoYcs7IVeqRq7IviHGmlUIu2kiHdtvRoU9BNKei8ttzjv9P+Aufih9/Jy3iS8UgPITtAq3votVs/59PesMHqai7Je1M/RQ0SbQyHrlnKhSLSZy51PpwYDE3cnRNTnf+hZqPC/Lwum6fI0POz3A8eHqNJMQBk1RmppVLC4oVaO7KTVPeix3P0c2PR3WlxUjG/voVA9/HYJaISfb8rbII01YBwCA8sgsKxYoA5AY8WYIsGyWfVVa88nq2x2zm8jLfR+cWojayL/ErhULSd+2DrZ8LaHlv1b0VysGMNNn3O3AamfV6peKOK5lDGCA3wwggN4AgEBMH0waTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMUEwPwYDVQQDEzhEaWdpQ2VydCBUcnVzdGVkIEc0IFRpbWVTdGFtcGluZyBSU0E0MDk2IFNIQTI1NiAyMDI1IENBMQIQCE/cM09+RU7bww+P+ZIYNTANBglghkgBZQMEAgEFAKCB0TAaBgkqhkiG9w0BCQMxDQYLKoZIhvcNAQkQAQQwHAYJKoZIhvcNAQkFMQ8XDTI2MTAwOTExMTkyMVowKwYLKoZIhvcNAQkQAgwxHDAaMBgwFgQUUdmr2gNJc9hPQmaspIJI5rNpxDkwLwYJKoZIhvcNAQkEMSIEIE8g8PEhuorgcfrllsoZEMtPNPcYmZ9+IytRRo+gCXUaMDcGCyqGSIb3DQEJEAIvMSgwJjAkMCIEIC2gnaf0Ex+f5y22xebpyWVnVa8EPx6nQswNISDhQev8MA0GCSqGSIb3DQEBAQUABIICAIIvM9RpSQXwA6jvoIxGNm2X9z0twB317EIT5xOYX9DwFZR7z5PYiVGCgVi+6rdWT17/EGh5mPDSsPAGQlSqB4SAsPzpGjW7r6Z2G49PzZAC3Tv+7bUcooBV/Fa/D9u41gPP1ZWtttikm93AbyIsNnD+HRoji4nntZ/myobL9T8nbhB6gBOD/NJR+S1LTZZAsQNuSKaUt7AJz8Pkp/w7xe5VYVIz2BKDUqRhbddzMEwcmkwm8ixa9RSxD6x689A9aLYk93FwgUZB85ZBuzCMNG17z51dj1JMDuL/NOB5iX8SCEiohng1nTJXNBPBT9cBC98WJ3rCqr8E7DY5JA9xHTkee3pjajmqk9skKUPHAw3fxzepNd4gBoqyrKgM99FtkHwNDNoHmVsJY/QifXBUKZgqBAlBw59PnMMFxGTv2A8WC+lpnFAamGgnx/O4CkoMNEPDxU8J9Y3QqJ3w2NT+CIixtHtkp46WBfU0gvz7pr61LSJtbtZ513+6okufLrEekSuAaSz7eWNewMeZ6sQ1Rp0RVEUWRP53sws6ZD1Ml4KdMNKrDuMo5fH0rHQL0rj4hDUipy7Bn6M4FPzjFjuLSfla6iKhvgE6z8cd516Bk6YBpc4CSVuMAH/M+1+i8xGzKagXQKkJz/RjXD6Tw66I48CbYlfan4LxN6hPdIBuks32"}}},{"lane_id":8,"host":"app.client.test","role":"athz","name":"Authorization","status":"closed","items":[{"item_id":93,"idx":1,"key":"WSTG-ATHZ-01","text":"Test for directory traversal and file inclusion","state":"done","na_reason":null,"controls":["ISO-A.5.15","PCI-6.2.4","PCI-11.4.3"]},{"item_id":94,"idx":2,"key":"WSTG-ATHZ-02","text":"Test for bypass of the authorization schema","state":"done","na_reason":null,"controls":["ISO-A.5.15","PCI-6.2.4","PCI-11.4.3"]},{"item_id":95,"idx":3,"key":"WSTG-ATHZ-03","text":"Test for privilege escalation","state":"done","na_reason":null,"controls":["ISO-A.5.15","PCI-6.2.4","PCI-11.4.3"]},{"item_id":96,"idx":4,"key":"WSTG-ATHZ-04","text":"Test for insecure direct object references","state":"done","na_reason":null,"controls":["ISO-A.5.15","PCI-6.2.4","PCI-11.4.3"]}],"evidence_ids":[70,71,72,73],"receipt":{"manifest_sha256":"8ed282dde205101815ab8ba63a2e41d07fda63838736c1e37a869c9acc27840a","closed_by":"Demo Reviewer","issued_at":"2026-10-09T11:30:11.416790+00:00","signature":{"algorithm":"Ed25519","public_key":"MCowBQYDK2VwAyEAN2GFAjnf+WGqyHnHUs3hRQ49MirG5JAs3NzSwRnV3jQ=","key_fingerprint":"82e8572262343d35f1a491e5ce139a4bc133d027bdd0a3c95121b4542d8bf337","payload":"{\"chain\":{\"head\":\"bc4fcec42ad58bd4f654844a1460084d646efb5269875e120a8703443bbc9e04\",\"seq\":43},\"engagement\":{\"id\":3,\"name\":\"Client web app\"},\"format\":\"attackledger-receipt-v2\",\"issued_at\":\"2026-10-09T11:30:10+00:00\",\"key_fingerprint\":\"82e8572262343d35f1a491e5ce139a4bc133d027bdd0a3c95121b4542d8bf337\",\"lane\":{\"host\":\"app.client.test\",\"id\":8,\"role\":\"athz\"},\"manifest_sha256\":\"8ed282dde205101815ab8ba63a2e41d07fda63838736c1e37a869c9acc27840a\",\"signer\":{\"id\":2,\"name\":\"Demo Reviewer\"}}","value":"RZPSxenOlwyYQ3LvC0UX3FheLVqZimO1Q4BZLLepHpQer0ecsPa7X0AhoYXgf1t5DGm1dL49i3Ds7eAKxxT1Aw=="},"timestamp":{"tsa":"http://timestamp.digicert.com","time":"2026-10-09T11:30:11+00:00","token":"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"}}},{"lane_id":9,"host":"app.client.test","role":"sess","name":"Session management","status":"closed","items":[{"item_id":97,"idx":1,"key":"WSTG-SESS-01","text":"Test the session management schema","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":98,"idx":2,"key":"WSTG-SESS-02","text":"Test cookie attributes","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":99,"idx":3,"key":"WSTG-SESS-03","text":"Test for session fixation","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":100,"idx":4,"key":"WSTG-SESS-04","text":"Test for exposed session variables","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":101,"idx":5,"key":"WSTG-SESS-05","text":"Test for cross-site request forgery","state":"na","na_reason":"not present on this host","controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":102,"idx":6,"key":"WSTG-SESS-06","text":"Test logout functionality","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":103,"idx":7,"key":"WSTG-SESS-07","text":"Test session timeout","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":104,"idx":8,"key":"WSTG-SESS-08","text":"Test for session puzzling","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":105,"idx":9,"key":"WSTG-SESS-09","text":"Test for session hijacking","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]}],"evidence_ids":[74,75,76,77,78,79,80,81],"receipt":{"manifest_sha256":"f37aa01e3b039ec06945c3393eccea320fed9a04e3d7d7b89205e60d107f49fb","closed_by":"Demo Reviewer","issued_at":"2026-10-09T11:19:21.985489+00:00","signature":{"algorithm":"Ed25519","public_key":"MCowBQYDK2VwAyEA3VNcCKmO/Az2pe4C22ws2uXoOJ4/Dz/ILS2OLCtsdf8=","key_fingerprint":"04d6131b52b091033f201537c88e7b13d66abde16d6380f3f8ccb311deac662c","payload":"{\"chain\":{\"head\":\"bc4fcec42ad58bd4f654844a1460084d646efb5269875e120a8703443bbc9e04\",\"seq\":43},\"engagement\":{\"id\":3,\"name\":\"Client web app\"},\"format\":\"attackledger-receipt-v2\",\"issued_at\":\"2026-10-09T11:19:21+00:00\",\"key_fingerprint\":\"04d6131b52b091033f201537c88e7b13d66abde16d6380f3f8ccb311deac662c\",\"lane\":{\"host\":\"app.client.test\",\"id\":9,\"role\":\"sess\"},\"manifest_sha256\":\"f37aa01e3b039ec06945c3393eccea320fed9a04e3d7d7b89205e60d107f49fb\",\"signer\":{\"id\":2,\"name\":\"Demo Reviewer\"}}","value":"oQXB6hn5N0pM+wWDuWqkULqDAd5ZfrjpVKH+spIhqIRkZfZ9vz9tXFYHvNc2f8cRyYpQzk8FQvLsy9U/yjAWDw=="},"timestamp":{"tsa":"http://timestamp.digicert.com","time":"2026-10-09T11:19:21+00:00","token":"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"}}},{"lane_id":10,"host":"app.client.test","role":"athn","name":"Authentication","status":"open","items":[{"item_id":106,"idx":1,"key":"WSTG-ATHN-01","text":"Test that credentials travel over an encrypted channel","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3","ISO-A.8.24"]},{"item_id":107,"idx":2,"key":"WSTG-ATHN-02","text":"Test for default credentials","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":108,"idx":3,"key":"WSTG-ATHN-03","text":"Test for weak lockout mechanisms","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":109,"idx":4,"key":"WSTG-ATHN-04","text":"Test for bypass of the authentication schema","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":110,"idx":5,"key":"WSTG-ATHN-05","text":"Test for vulnerable remember-password functions","state":"na","na_reason":"not present on this host","controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":111,"idx":6,"key":"WSTG-ATHN-06","text":"Test for browser cache weaknesses","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":112,"idx":7,"key":"WSTG-ATHN-07","text":"Test for weak password policy","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":113,"idx":8,"key":"WSTG-ATHN-08","text":"Test for weak security question and answer","state":"open","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":114,"idx":9,"key":"WSTG-ATHN-09","text":"Test for weak password change or reset functions","state":"open","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":115,"idx":10,"key":"WSTG-ATHN-10","text":"Test for weaker authentication in alternative channels","state":"open","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]}],"evidence_ids":[82,83,84,85,86,87],"receipt":null}],"evidence":[{"id":45,"seq":1,"lane_id":5,"host":"app.client.test","role":"info","item_id":62,"kind":"note","sha256":"21ee57a2d39ceefdb3cb4d08299f057551cae388163404b549e9375334f3910c","uri":null,"summary":"lane 5 item 1 checked","created_at":"2026-10-09T08:13:48.798026+00:00","prev_hash":"0000000000000000000000000000000000000000000000000000000000000000","chain_hash":"feb76264b0f76b483c371ad7b3d4b410fa3d49228fee48cea6fc9766bdcdbf04"},{"id":46,"seq":2,"lane_id":5,"host":"app.client.test","role":"info","item_id":63,"kind":"note","sha256":"656b53fe693de94f90c7115c697058643f39930c4abf772e5928e713c278ce5e","uri":null,"summary":"lane 5 item 2 checked","created_at":"2026-10-09T08:13:48.804084+00:00","prev_hash":"feb76264b0f76b483c371ad7b3d4b410fa3d49228fee48cea6fc9766bdcdbf04","chain_hash":"fe016161099f58d73c85ec5e8862f11c9de5f7750f11208757df9449c032f809"},{"id":47,"seq":3,"lane_id":5,"host":"app.client.test","role":"info","item_id":64,"kind":"note","sha256":"5f537acc6d23b4d0222e2749b9ff35dcfc9b5cdb7dce8ddc23cbf9b0d35dfce0","uri":null,"summary":"lane 5 item 3 checked","created_at":"2026-10-09T08:13:48.810906+00:00","prev_hash":"fe016161099f58d73c85ec5e8862f11c9de5f7750f11208757df9449c032f809","chain_hash":"3c5df61e10e78a9b449c19beed303969600a5b9a6cdae09d3b6e8206b51f81b7"},{"id":48,"seq":4,"lane_id":5,"host":"app.client.test","role":"info","item_id":65,"kind":"note","sha256":"e28a7f45efb5d367f579a86965b3a7c72e158ee529e538b1622bedd5488486f9","uri":null,"summary":"lane 5 item 4 checked","created_at":"2026-10-09T08:13:48.817100+00:00","prev_hash":"3c5df61e10e78a9b449c19beed303969600a5b9a6cdae09d3b6e8206b51f81b7","chain_hash":"3594a9b8ea9655e7f34b631783f774498d1febe3f256e051c1a0c874fccd039c"},{"id":49,"seq":5,"lane_id":5,"host":"app.client.test","role":"info","item_id":67,"kind":"note","sha256":"a8372bfca0b7affad13d332e3f44c86106a9c5fc784002bd06b7b23e8bbc618c","uri":null,"summary":"lane 5 item 6 checked","created_at":"2026-10-09T08:13:48.827129+00:00","prev_hash":"3594a9b8ea9655e7f34b631783f774498d1febe3f256e051c1a0c874fccd039c","chain_hash":"e6caf8e7463271869aaff92004a655f4ca42daf956a5e59d94a0bf63670121c6"},{"id":50,"seq":6,"lane_id":5,"host":"app.client.test","role":"info","item_id":68,"kind":"note","sha256":"39ed9e992992d0458304c6ceffe633ac3d22b20ef03c15b27ec5f7341e441d37","uri":null,"summary":"lane 5 item 7 checked","created_at":"2026-10-09T08:13:48.833565+00:00","prev_hash":"e6caf8e7463271869aaff92004a655f4ca42daf956a5e59d94a0bf63670121c6","chain_hash":"0c3c99b59eac355f95e16f7a84ab04363dfbb2e2d67239d2758cb19e156bc48a"},{"id":51,"seq":7,"lane_id":5,"host":"app.client.test","role":"info","item_id":69,"kind":"note","sha256":"5fef2da8e4443a40a46bf5b19ed47611046fe75e14d44a3cbb61f622fee2db64","uri":null,"summary":"lane 5 item 8 checked","created_at":"2026-10-09T08:13:48.840116+00:00","prev_hash":"0c3c99b59eac355f95e16f7a84ab04363dfbb2e2d67239d2758cb19e156bc48a","chain_hash":"d4ac38106cc0bce4eae2f156cd663fcdd602dc3afa2fea4f7bd5e0b9e10acc97"},{"id":52,"seq":8,"lane_id":5,"host":"app.client.test","role":"info","item_id":70,"kind":"note","sha256":"906fec458c8eeab6022042e62bb7a7262914f866476f6e227c25b4763984ad2d","uri":null,"summary":"lane 5 item 9 checked","created_at":"2026-10-09T08:13:48.845908+00:00","prev_hash":"d4ac38106cc0bce4eae2f156cd663fcdd602dc3afa2fea4f7bd5e0b9e10acc97","chain_hash":"aa6895893e3b309a1239dd6ce93b652e05a34bafc6ccc9a8e6dc2439a6d789db"},{"id":53,"seq":9,"lane_id":6,"host":"api.client.test","role":"info","item_id":72,"kind":"note","sha256":"59b7af71ae7ac78b45bd77a70b151bd6a4b2c13aa5350ceafd52c2d89f6acec9","uri":null,"summary":"lane 6 item 1 checked","created_at":"2026-10-09T08:13:48.864420+00:00","prev_hash":"aa6895893e3b309a1239dd6ce93b652e05a34bafc6ccc9a8e6dc2439a6d789db","chain_hash":"d94ea1d19c6d6f69228e395b99037b10abd5265f285999335569f6454956275a"},{"id":54,"seq":10,"lane_id":6,"host":"api.client.test","role":"info","item_id":73,"kind":"note","sha256":"9c26848dc0eee47712e6506aee404b61e0aaaeadadba5a1740041a1218b5af0c","uri":null,"summary":"lane 6 item 2 checked","created_at":"2026-10-09T08:13:48.870248+00:00","prev_hash":"d94ea1d19c6d6f69228e395b99037b10abd5265f285999335569f6454956275a","chain_hash":"c4ac316a96689d1ea57d07ed3b6291b1fbfb9d59a8ce7253e628e6ce0e3e19d0"},{"id":55,"seq":11,"lane_id":6,"host":"api.client.test","role":"info","item_id":74,"kind":"note","sha256":"2f0e874c2c66cecf80f1ade6202ec8d8e58bbb4add99e7f252830a965dec6468","uri":null,"summary":"lane 6 item 3 checked","created_at":"2026-10-09T08:13:48.876146+00:00","prev_hash":"c4ac316a96689d1ea57d07ed3b6291b1fbfb9d59a8ce7253e628e6ce0e3e19d0","chain_hash":"e99b84ea960a26654230cc1580aad62817327bd1131777c1b9a03514b0121a31"},{"id":56,"seq":12,"lane_id":6,"host":"api.client.test","role":"info","item_id":75,"kind":"note","sha256":"2e384a0b0eacad85a46783ba58e6a49d0a4f63c21607e09c3dcc4a323a5236e6","uri":null,"summary":"lane 6 item 4 checked","created_at":"2026-10-09T08:13:48.882128+00:00","prev_hash":"e99b84ea960a26654230cc1580aad62817327bd1131777c1b9a03514b0121a31","chain_hash":"de5e14e6c30410e8d18039d5d9c4341a9878752f0a782b490aefcb53064fd67e"},{"id":57,"seq":13,"lane_id":6,"host":"api.client.test","role":"info","item_id":77,"kind":"note","sha256":"ad5f9a46d6a5fd564e07d838edec4b358ceab76a7177686baf762789384f4ffe","uri":null,"summary":"lane 6 item 6 checked","created_at":"2026-10-09T08:13:48.892828+00:00","prev_hash":"de5e14e6c30410e8d18039d5d9c4341a9878752f0a782b490aefcb53064fd67e","chain_hash":"baf3acbe9ae03cfe0f679d509515fa1ef85862bf9599e36689177cd87eb10d1f"},{"id":58,"seq":14,"lane_id":6,"host":"api.client.test","role":"info","item_id":78,"kind":"note","sha256":"06f031d963fefb7625b6c874bc4e1855e10b48a1c916af2b856cf397a85db599","uri":null,"summary":"lane 6 item 7 checked","created_at":"2026-10-09T08:13:48.900077+00:00","prev_hash":"baf3acbe9ae03cfe0f679d509515fa1ef85862bf9599e36689177cd87eb10d1f","chain_hash":"642a7d33c900c94174fd073cebd7f2fa38357c0ce0b5c46d94244b4d3cd8072f"},{"id":59,"seq":15,"lane_id":6,"host":"api.client.test","role":"info","item_id":79,"kind":"note","sha256":"70f851c804a21a40598b1e44cef59a6fbcc2e8aaad20b1f44dd84ff2bf1ef96a","uri":null,"summary":"lane 6 item 8 checked","created_at":"2026-10-09T08:13:48.906881+00:00","prev_hash":"642a7d33c900c94174fd073cebd7f2fa38357c0ce0b5c46d94244b4d3cd8072f","chain_hash":"dc2749923371cf8a9c81b542d09bb22e1e04b5508f8e151d1e56af0a6c1fd3a2"},{"id":60,"seq":16,"lane_id":6,"host":"api.client.test","role":"info","item_id":80,"kind":"note","sha256":"8f9a5b303d75320cd67c749475102b91f72cde03eccdd26072c98fe30d4317b2","uri":null,"summary":"lane 6 item 9 checked","created_at":"2026-10-09T08:13:48.913252+00:00","prev_hash":"dc2749923371cf8a9c81b542d09bb22e1e04b5508f8e151d1e56af0a6c1fd3a2","chain_hash":"660704e041147126c18e83ea725a90071d53a13b82ee111d3d0d4aab9d201543"},{"id":61,"seq":17,"lane_id":7,"host":"app.client.test","role":"conf","item_id":82,"kind":"note","sha256":"c4f4624fbd55b02d303e2c39e67e5074b6982c8912227b3eab64f555525f1d86","uri":null,"summary":"lane 7 item 1 checked","created_at":"2026-10-09T08:13:48.931643+00:00","prev_hash":"660704e041147126c18e83ea725a90071d53a13b82ee111d3d0d4aab9d201543","chain_hash":"85396d9d111da3a386fe57cfcc1a9cd79ca31bf71a593c47fd258a027f6ec9d2"},{"id":62,"seq":18,"lane_id":7,"host":"app.client.test","role":"conf","item_id":83,"kind":"note","sha256":"ddc59ebc9fbb1b0f6c47f96943816735dc99ee7bbfac8f12c04d516cf52830a6","uri":null,"summary":"lane 7 item 2 checked","created_at":"2026-10-09T08:13:48.937959+00:00","prev_hash":"85396d9d111da3a386fe57cfcc1a9cd79ca31bf71a593c47fd258a027f6ec9d2","chain_hash":"dc3d851d0f19bb815f536dea506cb59818755a850b3e97891229a3e60d7bcc51"},{"id":63,"seq":19,"lane_id":7,"host":"app.client.test","role":"conf","item_id":84,"kind":"note","sha256":"dcd50c54a3b611d2220ae63ec426c9a8a6e0c858da57bdc1299eb2faa4cb2513","uri":null,"summary":"lane 7 item 3 checked","created_at":"2026-10-09T08:13:48.944342+00:00","prev_hash":"dc3d851d0f19bb815f536dea506cb59818755a850b3e97891229a3e60d7bcc51","chain_hash":"40895d4b115219c9abdcbd9a40d94b9c86ac0769e06716af19c593bee959558f"},{"id":64,"seq":20,"lane_id":7,"host":"app.client.test","role":"conf","item_id":85,"kind":"note","sha256":"f0714d00399c881ca795856475eacd2e1f73fe6c0eb76a0ca876fc3b07b5e270","uri":null,"summary":"lane 7 item 4 checked","created_at":"2026-10-09T08:13:48.951557+00:00","prev_hash":"40895d4b115219c9abdcbd9a40d94b9c86ac0769e06716af19c593bee959558f","chain_hash":"26bed96aed9b857d2a0da59db8a560a45416a6b9a84d78b494fc6cc8d84105df"},{"id":65,"seq":21,"lane_id":7,"host":"app.client.test","role":"conf","item_id":87,"kind":"note","sha256":"a20e6deae2cef924996e7cffacf62713ad662a97ec819a577ea51a114ed03f4f","uri":null,"summary":"lane 7 item 6 checked","created_at":"2026-10-09T08:13:48.961153+00:00","prev_hash":"26bed96aed9b857d2a0da59db8a560a45416a6b9a84d78b494fc6cc8d84105df","chain_hash":"48370fd9c6c2d042a4ae7c5a3dcc6ebf9462f2d3e6d90a7ca2519134d5341a1c"},{"id":66,"seq":22,"lane_id":7,"host":"app.client.test","role":"conf","item_id":88,"kind":"note","sha256":"741b9f30ce730856b868787ba0235418f50378e3334cb3ec786de86332a27e67","uri":null,"summary":"lane 7 item 7 checked","created_at":"2026-10-09T08:13:48.967132+00:00","prev_hash":"48370fd9c6c2d042a4ae7c5a3dcc6ebf9462f2d3e6d90a7ca2519134d5341a1c","chain_hash":"480aa801686877d07436d60cdabca64a593f7d51144a90c83955bf426139ef5f"},{"id":67,"seq":23,"lane_id":7,"host":"app.client.test","role":"conf","item_id":89,"kind":"note","sha256":"4a560040dc2f2f69f001353ec8778d220f1fe891a5851c0bc0ffc3e88fcb5f7a","uri":null,"summary":"lane 7 item 8 checked","created_at":"2026-10-09T08:13:48.972964+00:00","prev_hash":"480aa801686877d07436d60cdabca64a593f7d51144a90c83955bf426139ef5f","chain_hash":"1d7d863ff9ee034aa99c8a429f32df970499e10f2cb3f5785a6d40fe9436d5b0"},{"id":68,"seq":24,"lane_id":7,"host":"app.client.test","role":"conf","item_id":90,"kind":"note","sha256":"fdbb9ccc1d79a087603b95b9a0345bdf4db3fca6ab2efe1186bef20ce6cc600e","uri":null,"summary":"lane 7 item 9 checked","created_at":"2026-10-09T08:13:48.979670+00:00","prev_hash":"1d7d863ff9ee034aa99c8a429f32df970499e10f2cb3f5785a6d40fe9436d5b0","chain_hash":"f9a6bff7262f21196a9eaf81358e7cb1c23dc242b35ae65f0ad39d11cc6e18ae"},{"id":69,"seq":25,"lane_id":7,"host":"app.client.test","role":"conf","item_id":92,"kind":"note","sha256":"c433371a14b5c478e5b79483c921e8116c6587cbedc349991c4e78e4de3d2d97","uri":null,"summary":"lane 7 item 11 checked","created_at":"2026-10-09T08:13:48.990902+00:00","prev_hash":"f9a6bff7262f21196a9eaf81358e7cb1c23dc242b35ae65f0ad39d11cc6e18ae","chain_hash":"c3f31c444020884dd490bdccde530c7e51616ab639bfceb2a646a17f8405e5c0"},{"id":70,"seq":26,"lane_id":8,"host":"app.client.test","role":"athz","item_id":93,"kind":"note","sha256":"7eafbd2fb67f51f754ed68eb8a24614e3ab421871c627b4399c477031383fe0b","uri":null,"summary":"lane 8 item 1 checked","created_at":"2026-10-09T08:13:49.007663+00:00","prev_hash":"c3f31c444020884dd490bdccde530c7e51616ab639bfceb2a646a17f8405e5c0","chain_hash":"11b5e35e0adb6a1ea79fe72435aabf7a13b0dc5dfe0c7b5149f88c35ed960a25"},{"id":71,"seq":27,"lane_id":8,"host":"app.client.test","role":"athz","item_id":94,"kind":"note","sha256":"0853f816af5e5320dacc4168702be5f119a01caa4a78f130878a385ea394047c","uri":null,"summary":"lane 8 item 2 checked","created_at":"2026-10-09T08:13:49.014266+00:00","prev_hash":"11b5e35e0adb6a1ea79fe72435aabf7a13b0dc5dfe0c7b5149f88c35ed960a25","chain_hash":"a48ca8af1441f425f571153762e236b2ecbb4cb57cd8790554a181380a61e397"},{"id":72,"seq":28,"lane_id":8,"host":"app.client.test","role":"athz","item_id":95,"kind":"note","sha256":"d99f6940c239cfde52840a9a0d0161b2163c2d9806f7e9bf250be48bf3c1e6bf","uri":null,"summary":"lane 8 item 3 checked","created_at":"2026-10-09T08:13:49.021624+00:00","prev_hash":"a48ca8af1441f425f571153762e236b2ecbb4cb57cd8790554a181380a61e397","chain_hash":"7f2234f7e7ffe39fa347caf57836be8515e200e69080903fae5a0c0cc6658ca6"},{"id":73,"seq":29,"lane_id":8,"host":"app.client.test","role":"athz","item_id":96,"kind":"note","sha256":"35faa3133235a580711104351562aa6278d4ec94b942997c48b057cfd38cbd38","uri":null,"summary":"lane 8 item 4 checked","created_at":"2026-10-09T08:13:49.028958+00:00","prev_hash":"7f2234f7e7ffe39fa347caf57836be8515e200e69080903fae5a0c0cc6658ca6","chain_hash":"351dfd76ae0edacb366ed12323323804645cc3d100ce5c238cb45eadf5a35d7d"},{"id":74,"seq":30,"lane_id":9,"host":"app.client.test","role":"sess","item_id":97,"kind":"note","sha256":"5475b2ca0eaca4c7a3497aae2f42f9453ffe50d0fe39ff444de39056e34ff8b4","uri":null,"summary":"lane 9 item 1 checked","created_at":"2026-10-09T08:13:49.046001+00:00","prev_hash":"351dfd76ae0edacb366ed12323323804645cc3d100ce5c238cb45eadf5a35d7d","chain_hash":"0a69477741788eeb7b5be4135bb30ab50ad389635c54710e2082c7d2805a1fe7"},{"id":75,"seq":31,"lane_id":9,"host":"app.client.test","role":"sess","item_id":98,"kind":"note","sha256":"4b042c7c6a626dbcefd9c91961c382699369aa9184a5de7f7e9a0ad81c94b95f","uri":null,"summary":"lane 9 item 2 checked","created_at":"2026-10-09T08:13:49.055309+00:00","prev_hash":"0a69477741788eeb7b5be4135bb30ab50ad389635c54710e2082c7d2805a1fe7","chain_hash":"5e51b39ba3022fa4a0f6e2dd3c871d79609bdb50a645a18b9785f2b513762d23"},{"id":76,"seq":32,"lane_id":9,"host":"app.client.test","role":"sess","item_id":99,"kind":"note","sha256":"3a15f3647e1ee58ce62dba4921778c96a010aeb8a73a8f8f0ecfc1c3f0e667ff","uri":null,"summary":"lane 9 item 3 checked","created_at":"2026-10-09T08:13:49.063344+00:00","prev_hash":"5e51b39ba3022fa4a0f6e2dd3c871d79609bdb50a645a18b9785f2b513762d23","chain_hash":"bb4e9207cd0ec21a2d368b2e9ff0bf84761603e528899a72f01beb259edec2c3"},{"id":77,"seq":33,"lane_id":9,"host":"app.client.test","role":"sess","item_id":100,"kind":"note","sha256":"5e02a08e362fe087a81c7a73570c421c7e8e2984a83bb1d9158af97d4dac5678","uri":null,"summary":"lane 9 item 4 checked","created_at":"2026-10-09T08:13:49.071224+00:00","prev_hash":"bb4e9207cd0ec21a2d368b2e9ff0bf84761603e528899a72f01beb259edec2c3","chain_hash":"c5a35eab636cc0746bc4e89613e51ebf7ab9d0ae6017bd251d977da0ead3077c"},{"id":78,"seq":34,"lane_id":9,"host":"app.client.test","role":"sess","item_id":102,"kind":"note","sha256":"f99f1db8c936d5c8d4dd41e9788eecfd87e3c72d16f3cc42bf37d03d20541e14","uri":null,"summary":"lane 9 item 6 checked","created_at":"2026-10-09T08:13:49.083388+00:00","prev_hash":"c5a35eab636cc0746bc4e89613e51ebf7ab9d0ae6017bd251d977da0ead3077c","chain_hash":"35dd98f360ca2812837d06561a09ec9b991771e113426dd9369e10c23987fd57"},{"id":79,"seq":35,"lane_id":9,"host":"app.client.test","role":"sess","item_id":103,"kind":"note","sha256":"4462deeead30938b15047c5002bcd0eb8a786a94400ba09b49ae3837ceeb16c2","uri":null,"summary":"lane 9 item 7 checked","created_at":"2026-10-09T08:13:49.095574+00:00","prev_hash":"35dd98f360ca2812837d06561a09ec9b991771e113426dd9369e10c23987fd57","chain_hash":"e558f118b4772459effb42474383e3c554b9e07f573b41e6f5dc03c744d1de14"},{"id":80,"seq":36,"lane_id":9,"host":"app.client.test","role":"sess","item_id":104,"kind":"note","sha256":"7c90a7bd41f7b03ba55995c2d28eb6f3be470739dccee4782073c8178096479c","uri":null,"summary":"lane 9 item 8 checked","created_at":"2026-10-09T08:13:49.104175+00:00","prev_hash":"e558f118b4772459effb42474383e3c554b9e07f573b41e6f5dc03c744d1de14","chain_hash":"af8a1a204429ef016e89cc211e150779431f979a7e9172f38380c28f6d24c727"},{"id":81,"seq":37,"lane_id":9,"host":"app.client.test","role":"sess","item_id":105,"kind":"note","sha256":"0329386ab3eefdc043f84325735641b1bdfc5cdf7d9343e03d1f80d156c2a495","uri":null,"summary":"lane 9 item 9 checked","created_at":"2026-10-09T08:13:49.112252+00:00","prev_hash":"af8a1a204429ef016e89cc211e150779431f979a7e9172f38380c28f6d24c727","chain_hash":"82a20fe0bcb5f643d0b54369b845dc6373a2675ee0ccb756d22e2a0d1e7e28dc"},{"id":82,"seq":38,"lane_id":10,"host":"app.client.test","role":"athn","item_id":106,"kind":"note","sha256":"caaca830b4a8af22e06c759a198930ca52466f0d7f05fd8c7ce91555b18b05d8","uri":null,"summary":"lane 10 item 1 checked","created_at":"2026-10-09T08:13:49.132455+00:00","prev_hash":"82a20fe0bcb5f643d0b54369b845dc6373a2675ee0ccb756d22e2a0d1e7e28dc","chain_hash":"8a2b6dd798d8f7f2f55242c35cc2ef72ec8515361d763ca2ffff3ad1d7e18fac"},{"id":83,"seq":39,"lane_id":10,"host":"app.client.test","role":"athn","item_id":107,"kind":"note","sha256":"3c0208c82e58e85fcdc75903d041e1cfd87744db6aa99b45c2d6ea4c54cc28db","uri":null,"summary":"lane 10 item 2 checked","created_at":"2026-10-09T08:13:49.139701+00:00","prev_hash":"8a2b6dd798d8f7f2f55242c35cc2ef72ec8515361d763ca2ffff3ad1d7e18fac","chain_hash":"44f7948bd4c4399bc00f8a6aae44c8678d41df630172a86d8d0e23148425a767"},{"id":84,"seq":40,"lane_id":10,"host":"app.client.test","role":"athn","item_id":108,"kind":"note","sha256":"f15b0d1e8d03bd0a3564d6f54371b5bd8253b3df9368aa92873455a642bae5bf","uri":null,"summary":"lane 10 item 3 checked","created_at":"2026-10-09T08:13:49.146061+00:00","prev_hash":"44f7948bd4c4399bc00f8a6aae44c8678d41df630172a86d8d0e23148425a767","chain_hash":"89ff8bff683f1629910cae5f91a475b23360c7d26708f6b9ba48aa5b87da4291"},{"id":85,"seq":41,"lane_id":10,"host":"app.client.test","role":"athn","item_id":109,"kind":"note","sha256":"ff30bab11c44ae0a455698c46232a48e6e68c0241f50c63282e2943af624b7d7","uri":null,"summary":"lane 10 item 4 checked","created_at":"2026-10-09T08:13:49.153239+00:00","prev_hash":"89ff8bff683f1629910cae5f91a475b23360c7d26708f6b9ba48aa5b87da4291","chain_hash":"d180ef5c1353dde57494629b20610cc76e03f8c00116996591dcfabf256a6a7b"},{"id":86,"seq":42,"lane_id":10,"host":"app.client.test","role":"athn","item_id":111,"kind":"note","sha256":"c3ebef1242f8ba9a6c2c9cbbec90c32a2e43ae6c39586d426b45cae2f4232280","uri":null,"summary":"lane 10 item 6 checked","created_at":"2026-10-09T08:13:49.162505+00:00","prev_hash":"d180ef5c1353dde57494629b20610cc76e03f8c00116996591dcfabf256a6a7b","chain_hash":"efb4f55ae1289f1dd2f4c491ce6a79b71bc94dbbb18ccf446bf9c30651008cde"},{"id":87,"seq":43,"lane_id":10,"host":"app.client.test","role":"athn","item_id":112,"kind":"note","sha256":"2574309596990f3323ded9ea4688f8b889ba3d747ec832a2da67a28d6681fd15","uri":null,"summary":"lane 10 item 7 checked","created_at":"2026-10-09T08:13:49.168495+00:00","prev_hash":"efb4f55ae1289f1dd2f4c491ce6a79b71bc94dbbb18ccf446bf9c30651008cde","chain_hash":"bc4fcec42ad58bd4f654844a1460084d646efb5269875e120a8703443bbc9e04"}],"jobs":[],"controls":{"engagement":"Client web app","pack":"web-pentest-wstg","hosts_in_scope":2,"disclaimer":"Indicative mapping of tests to controls; not a compliance determination.","controls":[{"id":"DORA-ART8","text":"Identification of ICT assets and risks","framework":"dora","framework_name":"EU DORA (Regulation 2022/2554)","required":20,"evidenced":20,"lanes":["Information gathering"],"status":"evidenced"},{"id":"ISO-A.5.15","text":"Access control","framework":"iso-27001-2022","framework_name":"ISO/IEC 27001:2022 Annex A","required":18,"evidenced":4,"lanes":["Authorization","Identity management"],"status":"partial"},{"id":"ISO-A.5.9","text":"Inventory of information and other associated assets","framework":"iso-27001-2022","framework_name":"ISO/IEC 27001:2022 Annex A","required":20,"evidenced":20,"lanes":["Information gathering"],"status":"evidenced"},{"id":"ISO-A.8.24","text":"Use of cryptography","framework":"iso-27001-2022","framework_name":"ISO/IEC 27001:2022 Annex A","required":12,"evidenced":1,"lanes":["Authentication","Configuration","Cryptography"],"status":"partial"},{"id":"ISO-A.8.28","text":"Secure coding","framework":"iso-27001-2022","framework_name":"ISO/IEC 27001:2022 Annex A","required":88,"evidenced":0,"lanes":["API","Business logic","Client side","Error handling","Input validation"],"status":"none"},{"id":"ISO-A.8.5","text":"Secure authentication","framework":"iso-27001-2022","framework_name":"ISO/IEC 27001:2022 Annex A","required":38,"evidenced":9,"lanes":["Authentication","Session management"],"status":"partial"},{"id":"ISO-A.8.9","text":"Configuration management","framework":"iso-27001-2022","framework_name":"ISO/IEC 27001:2022 Annex A","required":22,"evidenced":11,"lanes":["Configuration"],"status":"partial"},{"id":"PCI-11.4.1","text":"A penetration testing methodology is defined and followed","framework":"pci-dss-4.0","framework_name":"PCI DSS v4.0","required":20,"evidenced":20,"lanes":["Information gathering"],"status":"evidenced"},{"id":"PCI-11.4.3","text":"External penetration testing is performed","framework":"pci-dss-4.0","framework_name":"PCI DSS v4.0","required":174,"evidenced":24,"lanes":["API","Authentication","Authorization","Business logic","Client side","Configuration","Cryptography","Error handling","Identity management","Input validation","Session management"],"status":"partial"},{"id":"PCI-6.2.4","text":"Software engineering techniques prevent or mitigate common software attacks","framework":"pci-dss-4.0","framework_name":"PCI DSS v4.0","required":130,"evidenced":13,"lanes":["API","Authentication","Authorization","Business logic","Client side","Input validation","Session management"],"status":"partial"},{"id":"PCI-6.4.1","text":"Public-facing web applications are protected against attacks","framework":"pci-dss-4.0","framework_name":"PCI DSS v4.0","required":64,"evidenced":0,"lanes":["Client side","Input validation"],"status":"none"}]},"integrity":{"algorithm":"sha256","body_sha256":"b02ca3cdd94480703e736caf5f8f9d218d996c05d8202afc8f3fcd7fa00868db","chain_genesis":"0000000000000000000000000000000000000000000000000000000000000000"}}