Reporting

PwnDoc

Self-hosted pentest reporting platform with reusable finding templates and collaborative review.

Open sourceReportingWeb appAPIMobileCloudInternalExternal

What it is

PwnDoc keeps findings, CVSS, and report generation in one place the desk controls. Use it when the firm wants templated write-ups and a review workflow without shipping client data to a SaaS reporter.

Reach for it when

Any engagement that needs a structured report, especially when multiple operators file into the same document.

Watch-outs

It holds the whole engagement — host it on the firm's network, back it up, and restrict access. Do not paste real ePHI into screenshots. Export finals to the client portal, not email, when the BAA says so.

Typical invocation

Create the engagement, import findings from the desk, generate the DOCX/PDF from the signed template.

Authorized assessments only. Stay inside the rules of engagement.

Pin to a kit

Open an engagement first.

SysReptor
Pentest reporting suite with finding design, CVSS, and export, community or professional.
Dradis
Collaboration platform for evidence, notes, and report generation across a pentest team.
Faraday
Vulnerability management workspace that normalizes scanner output into a single engagement view.