Only invited team members and the pentesters can see the list of reported vulnerabilities. Cobalt Customer Success and SecOps members will be able to view vulnerabilities in order to support the pentest. All of this access is visible and controllable within each pentest program’s settings.