After a lead pentester has reviewed a vulnerability report, the report is assigned a score, and that score is included in the average of a pentester's vulnerability report scores.