Reporting

Structured findings, severity, evidence, and multiple output formats.

Overview

Every Diverg investigation produces a structured report. Findings are classified by severity, include evidence (e.g. request/response, links, screenshots), and clearly indicate which checks were run and which were skipped. Reports can be viewed in the dashboard, exported as JSON/CSV, or delivered via Telegram or webhooks for monitoring.

Report structure

  • Executive summary: High-level overview for leadership, key risks and recommended actions
  • Technical findings: Per-finding detail: title, severity, affected asset, description, evidence, and remediation notes
  • Skipped checks: Explicit list of tests not run (e.g. missing API key) so you know what is not covered
  • Raw data: Optional JSON/CSV export for further analysis or integration into other tools

Severity

Findings are rated (e.g. Critical, High, Medium, Low, Info) based on impact and exploitability. Criteria align with common frameworks (CVSS-style where applicable) so reports are defensible for compliance or stakeholder review.

Visualizations

For blockchain investigations, reports can include interactive flow diagrams showing fund movement between wallets, exchanges, and mixers. These are generated when the relevant API keys (e.g. Bubblemaps) are configured. See Blockchain.

Delivery

Depending on your setup:

  • Dashboard: View and filter reports in the web UI
  • Telegram: Receive instant alerts or summaries in a channel or DM
  • API: Fetch report JSON programmatically for CI/CD or custom tooling
  • Webhooks: Push summary or full report to a URL (e.g. Slack, internal systems)

See Integrations for configuration.