Key Features
- Self-hosted reporting tool running via Docker with full data sovereignty and AGPL licensing.
- AI-assisted finding drafting using local (Ollama) or hosted (OpenAI, Anthropic, Groq) models with custom prompts.
- Native support for CVSS 3.1 and 4.0, CWE mapping, and fully customizable finding fields.
- Integrated methodology library featuring 22 checklists and 21 runbooks ranging from OSSTMM to MITRE ATT&CK.
- Automated report generation using custom Word (.docx) templates or a built-in PDF engine with brand styling.
- Real-time collaboration for multi-tester engagements with granular role-based access control.
Use Cases
- Streamlining the transition from technical evidence to polished report prose using evidence-driven AI prompts.
- Maintaining a centralized library of findings and methodologies to standardize deliverables across a security firm.
- Managing complex assessments with multiple phases, testing calendars, and retest tracking workflows.
- Ensuring compliance with data residency requirements by hosting all client data and findings on internal infrastructure.
