Dradis
Dradis: A strong fit for organizing findings, evidence, reports, and remediation across pentest teams. Ranked #27 of 34 in Penetration Testing Software by our editors (6.5/10); pricing: Free plan · 14-day trial; best for pentest reporting and evidence workflows.
At a glance
- Editor score6.5 / 10
- PricingFree plan · 14-day trial
- Best forPentest reporting and evidence workflows
- Free planYes
- Paid from$100/seat/mo
- DeploymentOn-prem
- Founded2007 · London, United Kingdom
- Facts checked20 Sep 2026
Where it wins
- Imports results from 47+ security scanners and tools
- Generates Word, Excel, HTML, PDF, and CSV reports
- Supports self-hosted, private-cloud, and air-gapped deployment
Where it doesn't
- It is not an automated penetration-testing engine
- The Community Edition supports one project at a time
- Remediate costs $200 per seat per month on annual billing
Our verdict on Dradis
Dradis is a self-hosted penetration-testing reporting and management platform for consultancies, internal security teams, and enterprise security groups. It centralizes findings, evidence, notes, testing methodologies, checklists, reusable issues, collaboration, quality assurance reviews, and client results. The platform supports web, Windows, macOS, Linux, API, and self-hosted deployments, with web application testing, network testing, finding management, and evidence capture capabilities.
Its strongest area is the workflow around pentest findings and evidence. Dradis imports results from 47+ security scanners and tools, including Nessus, Burp Suite, Nmap, Qualys, Acunetix, and OWASP ZAP. A rules engine can map, categorize, and deduplicate findings, while one-click reporting supports Word, Excel, HTML, PDF, and CSV formats. Testing methodologies, team collaboration, quality assurance reviews, a reusable issue library, REST API access, webhooks, and an interactive client results portal extend the platform beyond basic report generation.
Pricing separates core reporting from remediation and enterprise administration. The open-source Community Edition supports one project at a time and includes community forum support. Assess costs $100 per seat per month on annual billing and adds unlimited projects, 47+ integrations, reporting, collaboration, methodologies, and quality assurance reviews. Remediate costs $200 per seat per month on annual billing and adds remediation tracking plus Azure DevOps, Jira, and ServiceNow integrations. Enterprise adds audit logging, LDAP / Active Directory, Azure / Entra ID authentication, Okta / SAML, and a priority support queue. Dradis suits teams that need controlled pentest documentation and evidence workflows; teams seeking an automated testing engine should choose a different type of tool.
Your product? Our editors can test Dradis in depth and publish a review, labelled as paid · from $149/mo →
Dradis pricing
All 4 Dradis plans and prices →
Dradis fact sheet
| Free plan | Yes |
|---|---|
| Paid from | $100/seat/mo |
| Deployment | On-prem |
| Web app testing | Yes |
| API testing | Not verified |
| Network testing | Yes |
| Mobile testing | Not verified |
| Finding management | Yes |
| Evidence capture | Yes |
| Free trial | 14 days |
| Money-back guarantee | 30 days |
| Deployment | Self-hosted, Cloud, Desktop |
| Platforms | Web, Windows, macOS, Linux |
| Compliance & security | SOC 2, GDPR, HIPAA, PCI DSS, SSO/SAML, 2FA |
| Support | Email, Live chat, Community, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 47+ integrations: Nessus, Burp Suite, Nmap, Qualys, Acunetix, OWASP ZAP … See all → |
| Pricing | Free plan · 14-day trial (source) |
| Website | dradis.com |
| Facts checked | 20 Sep 2026 |
Dradis integrations
Dradis lists 47+ integrations on its own site — the 16 named here are the ones its pages call out.
- Nessus
- Burp Suite
- Nmap
- Qualys
- Acunetix
- OWASP ZAP
- Jira
- Azure DevOps
- ServiceNow
- Okta
- SAML
- LDAP
- AWS
- Docker
- VMware
- VirtualBox
Alternatives to Dradis
- PentesterraBroad automated penetration testing with a free plan and €23 monthly entry tier.9.3
- PentiBroad AI-led testing with human validation, evidence, retesting, and compliance reporting.9.1
- Core ImpactA broad on-premise toolkit for repeatable infrastructure, web, client-side, wireless and mobile testing.8.9
Used Dradis? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Dradis for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Dradis is listed in our Penetration Testing Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/dradis/"><img src="https://www.itechguides.com/best/badge/dradis.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update