The --output flag generates a professional PDF report. This page documents every section.
stacksentry -t https://your-app.com --mode full -o report.pdf
Report Sections
| # | Section | Contents |
|---|---|---|
| 1 | Executive Summary | Grade, score, high-risk count, attack path count |
| 2 | OWASP Top 10:2025 Breakdown | Which OWASP categories have failing checks |
| 3 | Attack Surface Heatmap | Visual check status across all four layers |
| 4 | Top 5 Priority Fixes | Highest-priority failing checks with expected grade impact |
| 5 | Layer-by-Layer Findings | All check results with details |
| 6 | Active Attack Paths | Chain descriptions and risk level |
| 7 | 30-Day Hardening Roadmap | Day 1 / Day 7 / Day 30 fix plan |
| 8 | What-If Simulation | Projected grade after each roadmap phase |
| 9 | Posture Drift Report | Changes since previous scan |
| 10 | Security Posture History | Grade timeline |
| 11 | Next Actions Checklist | Prioritised action list |
| 12 | Generated Patch Artefacts | Summary of patch files created |
| 13 | Auto-Fix Results | Applied fixes and their outcomes |
| 14 | Server Fingerprint | Stack detection results and scan metadata |
Audience Profiles
The --profile flag changes the narrative language without changing any underlying data:
| Profile | Audience | Language style |
|---|---|---|
student | Learning developers | Educational, explains the why behind each risk |
devops | Engineers | Operational, pipeline-focused |
pentester | Security testers | Technical, attack vector references |
cto | Decision-makers | Business language, risk quantification |
generic | General | Neutral, default |
stacksentry -t https://your-app.com --mode full \
--profile cto -o board-report.pdf