Thanks for the post.

I’d be careful with masking the anonymity of the organization — the part of the URL visible in the screenshots may very well give away the website you were pen testing. Just a tip.