A big company, who wanted to test their security infrastructure, wants to hire elite pen testers like you. During the interview, they asked you to show sample reports from previous penetration tests.

Signing a new NDA with the interviewing company does not nullify the confidentiality agreements you already have with previous clients whose data appears in those reports.

Sharing full unredacted reports is a direct breach of client confidentiality and prior contractual obligations, regardless of the context.

Previous penetration test reports belong to former clients and are covered by confidentiality agreements you signed with them. No new NDA with a prospective employer can override those existing obligations. Offering references allows you to demonstrate competence without breaching prior client trust.

Even heavily redacted reports may contain sensitive methodologies or findings, and sharing them still violates the spirit and terms of prior client confidentiality agreements.