Findings and risk
False positive
Also called: false finding
A false positive is a reported finding that is not actually exploitable or not actually present. Validating findings before they reach the report is one of the main differences between a penetration test and a raw scan output.
Testing, with the report an auditor can actually use
A fixed price, a date, and a report that states scope, method and closure. No discovery call required to get a number.