How Pental compares with PlexTrac, AttackForge, Dradis, SysReptor, Cyver Core and Ghostwriter on where each one runs, how it delivers to your clients, its report templates, its AI, the trackers and tools it connects to, and its price. Every fact about another product is from its own website or documentation, checked on 28 October 2026.
The questions a testing firm asks first. Each product's own page goes through fifteen, with the differences that matter and where the other product may suit you better.
| Compared | Pental | PlexTrac | AttackForge | Dradis | SysReptor | Cyver Core | Ghostwriter |
|---|---|---|---|---|---|---|---|
| Where it runs | The Portal run for you on your own database; the free tool on your server | Cloud, private instance or on-premises | Single-tenant on Azure; Enterprise can self-host | Self-hosted only | Self-hosted, or Cloud in Germany | Cloud on Azure (EU by default), private or on-premises | Self-hosted only |
| Client portal | White-labelled, at any size | White-labelled client portal | Client users in the platform | Client portal on paid plans | None documented; notes shared by link | White-labelled client portal | None documented |
| Report templates | Your own Word template, or the built-in PDF | Word (Jinja) and PDF templates | DOCX templates | Word templates, built for you on paid plans | HTML designs rendered to PDF; no Word export | Built in the platform; Word, HTML and PDF export | Word and PowerPoint (Jinja2) |
| AI | Your own key (OpenAI, Anthropic, Groq) or a local model | Plex AI add-on, built on Google Cloud | Your own assistants through MCP, local models included | Ollama locally, or OpenAI, Anthropic or Gemini | Provider you configure, or self-hosted; full agent on Professional | Copilot on Cyver’s own Azure OpenAI instance | None documented |
| Issue trackers | Two-way: Jira, ServiceNow, Azure DevOps, GitHub, GitLab, Linear | Jira (two-way), ServiceNow, Azure DevOps | Jira, ServiceNow, Azure DevOps (two-way) | Jira, ServiceNow, Azure DevOps (Remediate plan) | Jira export (Professional) | Jira, Azure DevOps, ServiceNow | None documented; GraphQL API |
| Importing tool output | Sixteen formats: Nessus, Burp Suite, OpenVAS, Qualys, Nmap and more | Burp Suite, Nessus, Qualys, Nexpose, Nmap and more | Burp Suite, Nessus, Qualys and more; CSV, JSON | Burp Suite, Nessus, Nmap, Qualys, ZAP and more; any CSV | Burp Suite, Nessus, Nmap, OpenVAS, Qualys, ZAP and more (Professional) | Burp, Nessus, Qualys, Nmap and more | BloodHound; Mythic and Cobalt Strike logs |
| Pricing | Published, £75 a tester a month for one ($99), falling as testers are added; the reporting tool free | Not published | Published, from $50 a month | Published, from $100 (£80) per seat a month, three seats minimum | Community free; Professional €50 per user a month, as its documentation lists | Published, from €99 a month | Free, open source (BSD-3) |
| Trying it | Free trial from go-live, no card required; the reporting tool free to run | Demo on request | 24-hour trial | Free Community Edition; 14-day trial | Community free to self-host | 15-day trial | Free to download and run |
The table scrolls sideways: every product is in it.
Products change: if anything here is out of date, tell us and we will correct it. Product names are the trademarks of their owners, and Pental is not affiliated with any of them.
Set up your own database, upload your own Word template and take a real engagement through Pental, client portal and all. A free trial of the whole Portal, no card required, and its days start when your portal goes live.