Reporting
Dradis
Collaboration platform for evidence, notes, and report generation across a pentest team.
What it is
Dradis CE/Pro collects notes, tool output, and findings into a single project so the report is not a pile of markdown files. Useful when several operators (and a QA reviewer) touch the same job. Pro adds connectors and templates.
Reach for it when
Multi-operator engagements that need a shared evidence board before the report freeze.
Watch-outs
Tool connectors will ingest raw scanner output — that output can contain credentials. Enable project-level access control and do not attach production dumps. CE vs Pro license must match how the firm ships reports.
Typical invocation
Stand up a project per engagement, drop Burp/Nmap evidence, then generate the report from the methodology checklist.
Authorized assessments only. Stay inside the rules of engagement.
Pin to a kit
Open an engagement first.
Related
- PwnDoc
Self-hosted pentest reporting platform with reusable finding templates and collaborative review.
- SysReptor
Pentest reporting suite with finding design, CVSS, and export, community or professional.
- Faraday
Vulnerability management workspace that normalizes scanner output into a single engagement view.