Penetration Test Retest Agent

After a penetration test, each finding needs an owner, a fix and proof that it is really fixed, but reports often sit in a folder until the next test. This agent reads the report, splits it into findings and creates tracked items with owners and deadlines based on severity. It drafts plain explanations so engineering teams understand the risk. When a team marks a fix done, it runs the safe retest steps from the report inside the agreed test window. It runs only retests marked non-destructive; anything else is prepared for a human tester. If a finding still reproduces, it reopens the item with the retest output and notifies the owner. Accepted risks need a named approver. It drafts a retest summary that the security engineer approves before it reaches auditors or management. Edge case: retests that could change or delete data are only prepared, never run.