Introduction

Vulnman is in a really early stage of development. Feel free to use, test it and please report bugs and other ideas. You should not use it in production, because there may be breaking changes in the database schema.

What is Vulnman?

Vulnman is a free and open-source pentest management and collaboration software. Manage your pentest projects and their related assets using the Vulnman web interface. Vulnman comes with a simple to use report generator. Once you have created your templates, the pentesters can create new reports with just a few clicks. This allows the pentesters to focus on finding vulnerabilities.

It is built using the powerful Django Framework.

Features

Unlimited Users and Projects

Despite other solutions, vulnman does not limit the amount of users or projects.

Report Generator

Vulnman contains a simple to use pentest report generator. After you have created your report template(s), you can create new reports with a few clicks. You will never have to struggle with Word documents again.

Customizable

Vulnman can be customized at multiple places. Some of them are the Report Template and Vulnerability Templates.


Markdown Syntax

Vulnman allows you to write your texts in markdown (mostly).

Vulnerability Management

Vulnman includes simple features to manage vulnerabilities of your projects. This includes Vulnerability Templates and different vulnerability scoring like CVSS.

Open-Source

Vulnman is fully open-source software. It is free to use.


Responsible Disclosure

Vulnman integrates features to support bug hunters during the responsible disclosure process. Share vulnerabilities discovered in third party software to their vendor, export advisories and more.

Multi Language Support

By default, vulnmans report and vulnerabilities are tracked in english. However, you can easily configure it to use your language.

REST-API

The REST-API is work in progress!

More information

This page is just a brief introduction to what Vulnman is all about, and many technical details have been omitted here for the sake of presentation.

Last modified November 28, 2022: update features (6f11cfc)