# Write a security finding someone else can verify

Source: https://www.web3sec.news/blog/security-writing-evidence-review
Updated: 2026-11-08

Assign owners and record supporting evidence in your team's own system.

- [ ] Name the reader, decision and technical reviewer.
- [ ] Give each material claim a source and evidence category.
- [ ] Record reproduction preconditions and tested version.
- [ ] Connect impact to an asset or workflow, not only a severity label.
- [ ] Label event, observation and discovery times clearly.
- [ ] Check publication approval, sensitive data and the correction procedure.

## References
- [CISA: cybersecurity incident and vulnerability response playbooks](https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Incident_Vulnerability_Response_Playbooks_508C.pdf)
- [Google engineering practices: how to review a change](https://google.github.io/eng-practices/review/reviewer/)