security-reporting

Pen Test Report Generation and Assessment Collaboration

AI-agent skill: turn confirmed vulnerabilities into submission-ready DOCX reports | 漏洞报告成稿 skill（SRC/0day 提交稿、分层验证门、Step 式 PoC、截图铁律）

A source-available command-line tool for cybersecurity reporting

PowerShell security reporting framework for Microsoft 365 identity posture assessment. Analyzes Authentication Context, PIM, Conditional Access & more.

A client-server application for CVE analysis and exploit detection with bilingual support, detailed reports, and a modern web interface.

Open-source vulnerability report generation platform for pentesters, VAPT teams, and security consultants.

🥜 Comprehensive Security Intelligence and Reporting Tool for Wazuh SIEM. Generates detailed HTML security reports with MITRE ATT&CK mapping, vulnerability detection, agent health monitoring, and automated email notifications. Production-ready with professional architecture.

Enterprise application security playbook covering attacker-driven testing, vulnerability management, and security automation across the SDLC.

AI security report generator and triage copilot with BYO provider and no-API mode

Vuln Report Kit is a local-first Obsidian plugin for vulnerability research notes, responsible disclosure reports, secret scanning, sanitized public exports, templates, dashboards and case backups.

Reportes es una extensión de reportería para Burp Suite que transforma la documentación de vulnerabilidades en un proceso automatizado, eficiente y profesional.

Free MSP/client security reporting templates + paid report automation sprint (DKK 499). Executive reports, QBRs, NIS2 evidence, M365 Secure Score from your tool data.

Example Faction Report Templates

No-nonsense security (NoNonSec). Ignored today, exploited tomorrow.

Website security monitoring for digital agencies. Explore the product, sample reports, ownership verification and documented security model.

A lightweight local network vulnerability scanner built using Python and Nmap. It scans a local subnet or target IP, detects risky services, assigns CVSS‑style severity, and generates HTML & PDF reports.

A passive reconnaissance learning project documenting public DNS records, web technologies, HTTP security headers, and evidence-based security observations.

Local-first scope enforcement, evidence, findings, reporting, and release trust for authorized penetration tests.

NETRA (नेत्र) is an AI-assisted security orchestration platform that automates vulnerability scanning, validation, compliance mapping, and reporting in a single workflow.

A Python and dashboard-based compliance reporting system that ingests security findings from SaaS, Snowflake, and IAM security monitors, maps findings to CIS/NIST/ISO-style controls, calculates risk scores, tracks remediation status, and generates executive dashboards, technical reports, and audit-ready evidence packs.