Findings and risk
Severity
Also called: finding severity, risk rating
Severity is the rating assigned to a finding to communicate how urgently it should be addressed, typically on a scale from informational to critical, and ideally reflecting exploitability and business impact rather than a score alone.
See also
Testing, with the report an auditor can actually use
A fixed price, a date, and a report that states scope, method and closure. No discovery call required to get a number.