Time Tracking That Passes Your Own Audit

Your Time Records Are Threat Data

Your timesheet reveals information adversaries would love to have:

• Client names — Which companies are investing in security (or need to)
• Engagement types — "Pentest - external perimeter," "IR - ransomware," "Compliance gap"
• Vulnerability details — Notes about findings before remediation
• Project timelines — When security assessments are happening
• Your methodology — What you spend time on reveals your approach

Pentest & Assessment Tracking

Client: MegaCorp Industries
├── Matter: External Penetration Test Q1
│   ├── Entry: Reconnaissance (4.2 hrs)
│   ├── Entry: Exploitation attempts (6.8 hrs)
│   └── Entry: Report writing (3.1 hrs)
└── Matter: Internal Assessment Q2
    ├── Entry: Network enumeration (2.5 hrs)
    └── Entry: AD privilege escalation (5.3 hrs)

• Quick Notes (Encrypted) — "Found SQLi in login portal"
• Multiple Rate Types — Assessment vs. report writing
• Flat Fee + Hourly — Track scope creep for future negotiation

Time-Critical Tracking

• One-tap timer start — During active incidents
• Offline capable — For air-gapped situations
• Export timeline — For post-incident billing and insurance claims
• Retainer tracking — Monthly hours with overflow to hourly