Owner-facing risk summary, impact, evidence summary, and recommended next steps.
File types
Markdown context and a copy-paste coding-assistant prompt. Manual delivery only.
Design cleanup prompt for reducing obvious AI frontend fingerprints.
Pass, still vulnerable, or needs more context after remediation.
Domains, windows, boundaries, contacts, and allowed testing areas.
Commercial records for requested or delivered services.
Lifecycle
- Requested.A report, service, or scope item enters the account queue.
- In review.Flagpole prepares or checks the deliverable.
- Delivered by admin.A real file is uploaded and attached to the account record.
- Available in account.The account shows a Download button for the delivered item.
- Retained with website history.The file stays connected to the same website and report history.
Buttons should say Download because the file may be PDF, Markdown, ZIP, text, or another uploaded format.
Before expecting a file
- You are logged in to the account that owns the website.
- The service request says Delivered.
- The row has a real Download button, not just a report summary.
If a file is missing, contact support with the website and service request.
Handling
Treat downloaded files as internal security material. Do not post report evidence publicly, forward files to unknown recipients, or upload sensitive details into tools your company has not approved.