How Umbra works

One workspace per engagement, from the first scan to the client’s verified letter.

1. Import

   Upload scanner output (Nessus, Burp, Nmap, OpenVAS and 120+ more), your Excel/CSV tracker, or Dradis and SysReptor exports. Duplicates are merged.

2. Write with the library

   Apply bilingual write-ups from the signed finding library, then adjust them for the client.

3. Generate the report

   Executive or technical, in English, Arabic or bilingual, produced into your firm’s Word template as DOCX or PDF.

4. Review and issue

   A second tester approves (four-eyes). The issued report is locked, versioned and fingerprinted.

5. Retest and attest

   Record retests and issue retest letters or attestations. Each carries a code the client’s auditors can check on a public verification page.

6. Deliver in your portal

   Clients sign in to your branded portal to download reports, follow remediation and request retests.