Tagged penetration-test-reporting