Saving...

Built For Penetration Testers

Your toolset to get the job done!

Feature Set Join Now

Recon

Import Nmap scans and quickly gain situational awareness during active engagements.

Exploit

Global Service Notes and Custom Command Templates help you find vulnerabilities fast.

Report

Capture screen shots and code snippets as you gain administrative privileges.

Engagements, Hosts & Services

The fundamental building blocks of your penetration test

Engagements

Your security assessment starts by creating an Engagement in PenTest.WS

Hosts

IP address, fully qualified domain name, or computer name, Hosts are your Engagement's targets

settings_ethernet

Services

TCP/UDP ports are the Services found during your penetration test

API

Access to your Engagements, Hosts, & Services through a RESTful architecture

Automate Your Reconnaissance

Scan templates, additive Nmap import, copy-and-paste command library, and more

Scan Templates

Customizable Nmap commands including your target's IP address or CIDR range, port numbers and all the command line switches you need

Import Nmap XML

Capture hundreds of hosts & thousands of services from one simple & quick Nmap or Masscan XML file import

Service Command Library

Create a global list of your favorite attack commands for each service and never again stumble with dozens of command line switches

Global Service Notes

GSN are tied to a service such as HTTP/SSH/SMB. When you encounter that service again, your notes are automatically available

Transform Your PenTest Workflow

The PenTest.WS platform eases your penetration testing process at every step. From automating Nmap scans, to copy-and-paste command libraries, to building a client deliverable.

Auto Recon

Scan templates & additive Nmap import

Auto Attack

Copy-And-Paste Command Library

Auto Report

Findings Library & Report Templates

Track Your Social Engineering Campaigns

Monitor every interaction, document outcomes, and build an evidence-backed story across your entire engagement lifecycle.

People Hacking

Log and analyze social engineering attempts, interactions, and outcomes to understand what works—and what doesn’t.

Events Timeline

Visualize your operations with a chronological view of interactions, host activities, service changes, and detection points.

Evidence Collection

Tag key moments as evidence. Build defensible findings from immutable event snapshots.

Gain Situational Awareness

Never lose track of your targets and maintain focus on the objective

Boards

Most of us are familiar with Boards style organization. These boards are user-defined for each Engagement and can contain any number of hosts.

The Matrix

Your 10,000 foot view of your Engagement, by Host & Port. Filter by OS, Type, Flags, Port Number/State/Status and more.

Subnetting

Breakdown a large engagement, maintain scope, and focus on individual segments of a target network

Findings & Reporting

flagFindings Library

Templates including background, description, impact, recommendations

sports_scoreEngagement Findings

Add Findings to your Engagement in real-time as you discover them

summarizeReporting Templates

Variables, For loops, If statements, and HTML content from your Findings

room_serviceGenerate Deliverables

Generate fully customized reporting documents with a single click

Collaborate With Teammates

Explore as a team. Hack as a team. Report as a team.

User Maintenance

Add, Edit & Delete users with PenTest.WS Pro Tier

Shared Engagements

Teams of penetration testers can now collaborate with PenTest.WS Pro. All Shared Engagement details are synchronized in real-time between users, even across the globe. Fields are temporarily locked while being edited and updated as data is saved to the server. Pop-up notifications are displayed about important events, such as adding/delete hosts, ports, credentials or findings.

supervisor_account

Access Control

The Engagement owner can grant Read Only or Full Access to teammates on an individual basis

Let's Get Started

Join today and start building your personal list of scan templates, shells library, service commands, checklists and so much more. Free to join and be sure to check out the Hobby Tier for more advanced features.

Unlimited Hosts & Services
Import Nmap & Masscan XML
Shells Library & Global Commands
Full Featured API

Latest News From PenTest.WS

The Human Attack Surface – Version 2.3

May 5th, 2025

We just launched PenTest.WS v2.3, and it’s a big one, especially if your red team ops go beyond just scanning ports and popping shells. With this release, we’re giving Pro Tier users new tools to track and understand the people behind the infrastructure. Because sometimes the weakest link isn’t a host, it’s a human. People […]

Community Repo & Multi-Step Commands – Version 2.2

January 7th, 2023

PenTest.WS v2.2 includes a new collaboration tool called Community Repo where you’ll find command templates for everything from PowerShell and Bash commands to BloodHound custom queries. Also, your General Command Library gets a new super power with the Multi-Step Commands feature. Community Repo: Commands Search by keyword, operating system, category, or service and you’re one […]

Large Engagements & General Notes Library – Version 2.1

April 24th, 2022

PenTest.WS v2.1 brings the much anticipated Large Engagements capability to Pro Tier, supporting Engagements with thousands, or tens of thousands of Hosts in a single Engagement. Additionally, Hobby Tier receives the new General Notes Library! Large Engagements – Pro Tier With Pro Tier’s new Large Engagement support, a single Engagement can easily handle thousands, or […]

Version 2.0 Release – Findings & Reporting

April 5th, 2021

Welcome to PenTest.WS Version 2.0! Our biggest update yet with the all new Findings System, DOCX Based Reporting Templates, Boards & The Matrix, Full Featured API and Shared Engagements in Pro Tier. Lots to cover, lets dig into it. Findings System & Findings Library During a security assessment we often discover vulnerabilities in web applications, […]

Free Tier

Free

ad supported

Features

Unlimited Hosts & Services
User-Defined Scan Templates
Import Nmap & Masscan XML
Global Service Notes
Boards & The Matrix
Full Featured API

Hobby Tier

$4.95

Per Month

Features

Service Command Library
Default Service Checklist
Engagement, Host & Port Note Pages
Scratchpad Editor
Clients Manager
Priority Support

Pro Tier

$249

Per Year

Features

Offline Stand-Alone Application
Findings Library
DOCX Based Reporting Templates
Subnetting System
Shared Engagements
LDAP & SMTP Integration