This page's audience our own tag's counts — open to see them

Period

–Visits

–Page views

–Clicks to vendors

–Time on page

–Reading now

Clicks to vendors, by tool

Top countries

Devices

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Pentographer

Free#29 of 34 in Penetration Testing Software

Pentographer: Open-source finding management with AI assistance, reporting, and self-hosting. Ranked #29 of 34 in Penetration Testing Software by our editors (6.3/10); pricing: Free plan; best for open-source finding management with AI help.

6.3/10Editor score

Visit Pentographer

Pentographer6.3 Visit Pentographer

At a glance

Editor score
6.3 / 10
Pricing
Free plan
Best for
Open-source finding management with AI help
Free plan
Yes
Paid from
Free
Deployment
Hybrid
Facts checked
20 Sep 2026

Where it wins
- Versioned findings with CVSS, risk, status, and evidence tracking
- Reusable playbooks mapped to OWASP, PTES, or custom frameworks
- AI-assisted drafting, customizable reports, APIs, and self-hosting
Where it doesn't
- Direct penetration-testing execution is outside its core positioning
- AI-assisted features depend on Claude
- Self-hosting requires PostgreSQL and evidence storage configuration

Our verdict on Pentographer

Pentographer is an open-source platform for organizing security assessments rather than executing penetration tests directly. It is designed for solo testers and security teams that need structured project workspaces, findings, evidence, playbooks, client reports, and team access. Its finding records support CVSS scores, risk levels, statuses, evidence attachments, and version history, while reusable checklists can follow OWASP, PTES, or custom frameworks.

Its strongest functional depth is finding and assessment management. Teams can create AI-assisted finding descriptions, remediation guidance, and playbooks using Claude, then generate reports through customizable Word templates with DOCX, PDF, and Markdown exports. Owner, admin, member, and viewer roles support shared workspaces, while the MCP server and GraphQL API provide programmatic access to pentest data. Claude Desktop and Cursor are the named integrations, giving the product a focused ecosystem rather than a broad integration catalog.

Deployment flexibility is another important distinction. Pentographer is available as a hosted cloud application or as a self-hosted deployment using PostgreSQL, local or S3-compatible evidence storage, and API-key or OAuth2 authentication. The open-source model and free availability suit teams that want control over deployment and assessment records without adding a paid tier to the workflow. Choose it for centralized finding management, repeatable playbooks, AI-assisted documentation, and customizable reporting. Choose an alternative when the primary need is direct penetration-testing execution rather than managing the work and outputs around an assessment.

Your product? Our editors can test Pentographer in depth and publish a review, labelled as paid · from $149/mo →

Pentographer pricing

Plans Free planFree Free to use — no paid tier required for the core job.

See plans on pentographer.com

Pentographer fact sheet

Free plan	Yes
Paid from	Free
Deployment	Hybrid
Web app testing	Not verified
API testing	Not verified
Network testing	Not verified
Mobile testing	Not verified
Finding management	Yes
Evidence capture	Yes
Deployment	Cloud, Self-hosted
Platforms	Web
Support	Docs
Built for	Solo, Small business, Mid-market (editorial estimate)
Integrations	2 integrations: Claude Desktop, Cursor
Pricing	Free plan
Website	pentographer.com
Facts checked	20 Sep 2026

Pentographer integrations

Pentographer lists 2 integrations on its own site.

Claude Desktop
Cursor

Alternatives to Pentographer

See all Pentographer alternatives →

Used Pentographer? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Pentographer for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Title

Your review

0 characters · at least 80, up to 3,000

Pros (optional · one per line)

Cons (optional · one per line)

Your name (shown with your review)

Role (optional)

Company (optional)

How long have you used it?

I've used Pentographer myself and this is my honest opinion — nobody paid or asked me to write it.

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

Pentographer is listed in our Penetration Testing Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/pentographer/"><img src="https://www.itechguides.com/best/badge/pentographer.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 7 Oct 2026 · How we research and update