Pentest reports that look as serious as the work behind them.
Document findings, score vulnerabilities, manage evidence and produce a professional security assessment without rebuilding the report every time.
The report is part of the work.
A security assessment should be clear to engineers, managers and clients. Aramon Pentest Reporter keeps every finding structured and turns the finished assessment into a consistent, professional document.
TEST REPORT
Spend your time on the assessment, not on fixing the document.
Every part of the workflow, from the first finding to the final PDF, is built so the report stays consistent without extra formatting work at the end.
Description, reproduction steps, evidence, impact, recommendations and references stay in the same order across the entire report.
Choose the CVSS metrics inside the finding. The score, vector and severity update automatically.
Add screenshots, captions and supporting evidence where they belong instead of managing a separate folder while writing the report.
Finding IDs, severity styling, tables, spacing, page structure and pagination are generated consistently.
Edit the assessment and see how the final report will look before exporting it.
The current product stores report data on the device. No account is required and authentication is currently disabled.
From finding to final report
Add the client, target, scope, assessment window and auditor information.
Record vulnerabilities as you discover them. Add the title, scope and technical content.
Calculate CVSS, add reproduction steps, evidence, impact and remediation guidance.
Preview the complete assessment and generate the final Aramon report.
No separate calculator tab.
Select the metrics while documenting the finding. The vector and score stay with the vulnerability, and the report always shows the exact scoring that produced it, calculated with the FIRST CVSS v3.1 equations.
Write like a pentester. Let the report keep the structure.
Description, steps to reproduce, evidence, impact and recommendations each have their place. The formatting tools stay out of the way until you need them, and every field lands in the same position in the final report.
One assessment. One visual language.
The report format does not change from one project to the next. Once a finding is documented, the renderer takes care of where everything goes.
Built local-first for the current release.
Reports are stored locally in the browser using IndexedDB. Project files can be exported and imported. Authentication is not active in the current release. Future Aramon identity integration is already architecturally prepared, but it stays disabled until it ships.
Start the report while the assessment is still fresh.
Create the project, add the first finding and let the report build as the assessment progresses.