Review & Approval Workflow
Vulnotes includes a built-in review system for quality assurance before delivering reports to clients. The workflow is based on snapshots and threaded comments.
How the review process works
- The author finishes writing the report and sets the status to Waiting for Review
- A reviewer opens the report and changes the status to Under Review
- The reviewer creates a snapshot - a frozen copy of the report at that point in time
- The reviewer reads through the snapshot and leaves comments on specific sections or findings
- The author addresses the comments, resolves them, and requests another review if needed
- Once everything looks good, the reviewer sets the status to Completed
Snapshots
A snapshot captures the entire state of the report (content sections, findings, metadata) at a specific moment. Think of it as a checkpoint you can always go back to.
To create a snapshot, go to the report and click Create Snapshot. Snapshots are read-only - you cannot edit them after creation.
Snapshot diffs
When you create multiple snapshots, you can compare them to see exactly what changed between reviews. The diff view highlights added, removed, and modified content across all sections and findings.
This makes it easy for reviewers to focus only on what changed since their last review instead of re-reading the entire report.
Review comments
Comments are attached to a specific snapshot. They are threaded, so you can have back-and-forth discussions about a particular issue.
Each comment can be:
- Open - the issue has been raised but not addressed yet
- Resolved - the author has addressed the feedback
The comment count badge on the report shows how many open comments remain. When all comments are resolved and the reviewer is satisfied, the report can be marked as completed.
Status lifecycle summary
| Status | Who sets it | What happens |
|---|---|---|
| Draft | Author | Report is being written |
| Waiting for Review | Author | Report is ready for someone to review |
| Under Review | Reviewer | Review is in progress, comments being added |
| Completed | Reviewer | Report is approved and ready for delivery |
