Security Reporter

Security Reporter is a self-hosted workspace for penetration testing assessments, replacing scattered documents and static Word reports with a structured environment for documenting findings, collaborating with colleagues and clients, and producing professional PDF reports. It covers the assessment lifecycle, from setup through review and delivery, keeping sensitive data on the team's own infrastructure.

The platform includes reusable finding templates and built-in templates based on frameworks such as OWASP Top 10, PCI DSS, and SANS guidelines, along with checklist workflows, custom fields, and flexible layouts. Collaboration features include comments, review states, activity trails, version history with diff functionality, and a client portal with role-based access for coordinating remediation and retests. Reporting supports customizable structure, content, and branding. Integrations cover Jira, Azure DevOps, REST APIs, webhooks, n8n, Zapier, and an MCP server for AI agents, with SAML and Microsoft SSO options and SCIM provisioning for Entra ID and Okta.

Reporter is aimed at security firms and enterprise security teams running penetration tests. It is packaged as a self-hosted platform quoted based on team, deployment, and support requirements, with commitment discounts on multi-year terms. A start-up plan is available for smaller practices within defined team and assessment limits.