Getting Started

The following guide outlines the steps to quickly onboard new users to production.

Before downloading and using a template, it is highly recommended to read the Using Templates Overview page for orientation.

Step 1: Download the OWASP template below that matches the desired report use case:

Web Application OWASP Report Template

3MB

PT_Library_Single-Scope_WebApp_OWASP_v1-0-4.docx

Mobile Application OWASP Report Template

3MB

PT_Library_Single-Scope_MobileApp_OWASP_v1-0-4.docx

Step 2: Upload the downloaded single-scope Template into PlexTrac.

Reference the Using Templates Overview page for instructions on associating the export template correctly.

Step 3: Attach the single-scope template to a report.

Within the report, navigate to the Details tab. In the "Report Template" field, select the template created in Step 2 and Click Save.

Step 4: Add the custom fields leveraged by the export template. Predefined custom fields are included in single-scope templates.

On the Details tab of the report, click Add Custom Field at the bottom of the page and create the following 'Report Custom Field' labels:

• Author 1

• Author 1 Title

• Author 1 Email

• Company 1 Name

• Company 1 Address

Once completed, Click Save.

Step 4 can also be completed when creating the Report Template.

Reference the 'Using Templates Overview' page for more information.

Step 4 can also be extended to a Secondary Author.

Reference the 'Version Control' page for more information.

Step 5: Add & Tag Findings with their associated OWASP Top 10 associated Risk.

The following Findings Tags (detailed below) will allow Findings within the exported Report to display correct information within certain sections of your Report. These Tags will only function appropriately within their respective scoped report.

Web Application OWASP Top 10 Tags (highlighted in yellow)

• a01 - A01:2021 - Broken Access Control

• a02 - A02:2021 - Cryptographic Failures

• a03 - A03:2021 - Injection

• a04 - A04:2021 - Insecure Design

• a05 - A05:2021 - Security Misconfiguration

• a06 - A06:2021 - Vulnerable and Outdated Components

• a07 - A07:2021 - Identification and Authentication Failures

• a08 - A08:2021 - Software and Data Integrity Failures

• a09 - A09:2021 - Security Logging and Monitoring Failures

• a10 - A10:2021 - Server-Side Request Forgery

Mobile Application OWASP Top 10 Tags (highlighted in yellow)

• m01 - M1:2023 - Improper Credential Usage

• m02 - M2:2023 - Inadequate Supply Chain Security

• m03 - M3:2023 - Insecure Authentication/Authorization

• m04 - M4:2023 - Insufficient Input/Output Validation

• m05 - M5:2023 - Insecure Communication

• m06 - M6:2023 - Inadequate Privacy Controls

• m07 - M7:2023 - Insufficient Binary Protections

• m08 - M8:2023 - Security Misconfiguration

• m09 - M9:2023 - Insecure Data Storage

• m10 - M10:2023 - Insufficient Cryptography

Step 6: Export the report.

Any narratives, findings, and affected assets expected in the report must be added before export.

To access additional pre-built customization options, please proceed to the following pages.