Working...

Saving...

Built For Penetration Testers

Trusted by:

Consulting Firms

Streamline client engagements, manage findings, and deliver polished reports without the overhead.

Save time on reporting and delivery
Simplify workflows across multiple clients
Scale from small to large engagements

Enterprise Teams

Trusted by financial services and healthcare organizations to run large-scale security assessments efficiently.

Handle thousands of assets seamlessly
Centralize data across distributed teams
Meet security and compliance demands

Government Agencies

Supports mission-critical testing programs with on-premise deployment and compliance-ready reporting.

Secure, offline deployments
Built for sensitive environments
Generate compliance-focused output

Recon

Import scan data and quickly build situational awareness to focus your testing where it counts.

Exploit

Leverage service notes and reusable command templates to speed up vulnerability discovery.

Report

Capture screenshots and evidence as you work, then turn them into polished client-ready reports.

Engagements, Hosts & Services

The fundamental building blocks of your penetration test

Engagements

Your security assessment starts by creating an Engagement in PenTest.WS

Hosts

IP address, fully qualified domain name, or computer name, Hosts are your Engagement's targets

settings_ethernet

Services

TCP/UDP ports are the Services found during your penetration test

API

Access to your Engagements, Hosts, & Services through a RESTful architecture

Automate Your Reconnaissance

Scan templates, additive Nmap import, copy-and-paste command library, and more

Scan Templates

Customizable Nmap commands including your target's IP address or CIDR range, port numbers and all the command line switches you need

Import Nmap XML

Capture hundreds of hosts & thousands of services from one simple & quick Nmap or Masscan XML file import

Service Command Library

Create a global list of your favorite attack commands for each service and never again stumble with dozens of command line switches

Global Service Notes

GSN are tied to a service such as HTTP/SSH/SMB. When you encounter that service again, your notes are automatically available

Transform Your PenTest Workflow

The PenTest.WS platform eases your penetration testing process at every step. From automating Nmap scans, to copy-and-paste command libraries, to building a client deliverable.

Auto Recon

Scan templates & additive Nmap import

Auto Attack

Copy-And-Paste Command Library

Auto Report

Findings Library & Report Templates

Track Your Social Engineering Campaigns

Monitor every interaction, document outcomes, and build an evidence-backed story across your entire engagement lifecycle.

People Hacking

Log and analyze social engineering attempts, interactions, and outcomes to understand what works—and what doesn’t.

Events Timeline

Visualize your operations with a chronological view of interactions, host activities, service changes, and detection points.

Evidence Collection

Tag key moments as evidence. Build defensible findings from immutable event snapshots.

Gain Situational Awareness

Never lose track of your targets and maintain focus on the objective

Boards

Most of us are familiar with Boards style organization. These boards are user-defined for each Engagement and can contain any number of hosts.

The Matrix

Your 10,000 foot view of your Engagement, by Host & Port. Filter by OS, Type, Flags, Port Number/State/Status and more.

Subnetting

Breakdown a large engagement, maintain scope, and focus on individual segments of a target network

Findings & Reporting

flagFindings Library

Templates including background, description, impact, recommendations

sports_scoreEngagement Findings

Add Findings to your Engagement in real-time as you discover them

summarizeReporting Templates

Variables, For loops, If statements, and HTML content from your Findings

room_serviceGenerate Deliverables

Generate fully customized reporting documents with a single click

Collaborate With Teammates

Explore as a team. Hack as a team. Report as a team.

User Maintenance

Add, Edit & Delete users with PenTest.WS Pro Tier

Shared Engagements

Teams of penetration testers can now collaborate with PenTest.WS Pro. All Shared Engagement details are synchronized in real-time between users, even across the globe. Fields are temporarily locked while being edited and updated as data is saved to the server. Pop-up notifications are displayed about important events, such as adding/delete hosts, ports, credentials or findings.

supervisor_account

Access Control

The Engagement owner can grant Read Only or Full Access to teammates on an individual basis

Let's Get Started

Join today and start building your personal list of scan templates, shells library, service commands, checklists and so much more. Free to join and be sure to check out the Hobby Tier for more advanced features.

Unlimited Hosts & Services
Import Nmap & Masscan XML
Shells Library & Global Commands
Full Featured API

Latest News From PenTest.WS

Findings Groups, Reporting Briefs, and File Shares – Version 2.5

September 7th, 2025

Version 2.5 is here, and it comes with three major features that elevate your work inside PenTest.WS — from organizing findings, to building reports, to managing files during engagements. Findings Groups Findings Groups give you a new way to organize your findings inside an engagement. By default, findings are still just a flat list — […]

A New Way to Work – Version 2.4

July 1st, 2025

We’re excited to drop a massive quality-of-life upgrade in version 2.4 — one that reflects how professional red teams actually operate. Here’s what’s new: 🧭 Pro Tier: Engagements Replace the Dashboard The old dashboard was built around shells and rooting boxes — but that’s not how pros manage a real engagement. We’ve replaced it with […]

The Human Attack Surface – Version 2.3

May 5th, 2025

We just launched PenTest.WS v2.3, and it’s a big one, especially if your red team ops go beyond just scanning ports and popping shells. With this release, we’re giving Pro Tier users new tools to track and understand the people behind the infrastructure. Because sometimes the weakest link isn’t a host, it’s a human. People […]

Community Repo & Multi-Step Commands – Version 2.2

January 7th, 2023

PenTest.WS v2.2 includes a new collaboration tool called Community Repo where you’ll find command templates for everything from PowerShell and Bash commands to BloodHound custom queries. Also, your General Command Library gets a new super power with the Multi-Step Commands feature. Community Repo: Commands Search by keyword, operating system, category, or service and you’re one […]