A rudimentary question, actually. But exactly this led to a lively discussion in our teams.
We use Owasp ZAP for security testing, at the end we can of course create a detailed report (mostly 250 pages), or a rudimentary report which we then use to show it to stakeholders or customers.
Example 2: We use in some test projects Katalon Studio also here one can create accordingly yes Reprts, and these one can also adapt. So we always create separate reports for developers and even customers, stakeholders.
Unfortunately, there was a request from some customers to see more details in the reports, but should a customer see too much? We have our doubts, because it will also lead to misunderstandings.
- Have you guys found a solution to how your teams approach this?
- Should reports be customized for stakeholders, customers?
- Is too much negativity in the reports harmful, or does it provide the clues that stakeholders, customers need?