Working with the Fixing Plan

Starting with the Retest

Before requesting a retest, ensure all fixes have been applied according to the action items in the draft report. This section guides you through initiating the retest, implementing the fixing plan, and accurately reviewing the results while determining the most appropriate status for each scenario.

Step 1: Access the Project

First, ensure that the status of the relevant project is in “Actions Required” status, which means it is pending for you to apply or update the fixing plan.

Step 2: Review the Fixing Plan Items

Next, go to the “Findings” tab to review all the findings in the report, along with their corresponding fixing plan items.

Step 3: Choose the Correct Status

Your goal is to accurately update the status for each finding in the "Findings" table. For each item, assign an action and mark it as "Fixed" or "Not Fixed." While you can add comments as needed, it's mandatory to provide a comment for the status "Not Fixed" for findings that carry a medium, high or critical risk.

Note that to pass the retest successfully, you must fix all medium-risk and higher findings. While low-risk findings don't need to be fixed, you still need to provide proper input on their status (fixed or not fixed).

Step 3.5: Add a Comment

Adding a comment varies depending on whether the finding is marked as “Fixed” or “Not Fixed.” Here is how to approach each scenario:

• "Fixed" scenario: When selecting the "Fixed" status, a plus (+) sign will appear. Click it to open a text area where you can add your comment.

• "Not Fixed" scenario: When selecting the "Not Fixed" status, a text area will automatically appear, prompting you to explain why the issue remains unresolved. Unlike the "Fixed" scenario, providing this explanation is mandatory.

Step 4: Request a Retest

After assigning a reference and status to every finding, you can request a retest. This option becomes available only when all findings show 100% progress—indicating that each issue has been fully addressed. At this point, you'll see a notification, and the "Retest" button will become active.

Clear Gate penetration test team performs the retest within five business days.