Cyver Core builds report templates inside its platform and styles them with CSS, runs its copilot on Cyver’s own Azure OpenAI instance, keeps its review workflow to Professional with your own domain an add-on there, and hosts on Microsoft Azure. Pental fills your own Word document, drafts with AI on your own key or a local model, includes QA review and your own domain at any size, and keeps each firm’s data in its own Postgres database. Here is the comparison, from each one’s own published information.
Each of Cyver Core's answers is taken from its own website or documentation, and each of Pental's from the screens it describes. Where Cyver Core's documentation does not cover something, the line says so rather than guessing.
| Compared | Pental | Cyver Core |
|---|---|---|
| Built for | Penetration testing firms of every size, with every feature at any size: the Portal priced per tester, the rate falling as a team grows, and our free, open-source reporting tool for a firm that wants only the reporting. | Pentest service providers and PTaaS businesses, and internal pentest and red teams. |
| Hosting and data | The Portal: Pental runs the software and your firm holds the data, in its own Postgres database: in your own cloud, on a server of yours or on Supabase Cloud, where Pental cannot read your findings. The free reporting tool runs on your own server, beside its own PostgreSQL. | Cyver’s cloud on Microsoft Azure, with data in the EU by default and the US or another region by arrangement; a private deployment on the Ultimate plan; or on-premises with Docker. |
| Client portal | A standing account for each client with every report, finding, retest outcome and attestation letter. Findings arrive when you release them, and questions are raised on the finding. | A white-labelled client portal where clients request retests and new tests, read reports as PDFs or dashboards, comment on findings and export them to their own Jira. |
| Your brand | Your own domain with TLS issued automatically, your sign-in page, email from your own address, and no Pental branding anywhere. | Your logo, colours and favicon. Your own domain as an add-on on Professional and included on Enterprise, and email through your own SMTP server. |
| Report templates | Your own Word template, with your cover page, headers, fonts, tables and appendices, or the built-in PDF. The same engagement renders the same file every time. | Templates built in the platform from sections and tokens, styled with an uploaded CSS file. Reports export to Word, HTML and PDF. |
| Editing the report in Word | Upload the edited report and the assessment updates to match, item by item, only where you tick. A reviewer’s tracked changes arrive as suggested edits. | Drafts are edited in the platform; reading an edited Word report back is not described. |
| AI | Your own key with OpenAI, Anthropic or Groq, or a model on your own hardware through Ollama or any compatible endpoint. Every prompt can be read and rewritten. | A copilot that drafts findings and summaries, run on Cyver’s own Azure OpenAI instance, with custom prompts. Cyver says customer data is not used for training. |
| QA review | Draft, in review and approved, with suggested edits made on the field itself, the firm’s own QA checklist ticked before a report can be approved, an AI reviewer if the firm turns it on, and release waiting for approval. | Draft and to-review statuses hidden from the client, comments that become tasks, and changes highlighted. The review workflow is on Professional. |
| Retests | Clients ask from the finding they are reading, or by closing a ticket in their own tracker. Every finding is tracked as fixed, still open or newly introduced. | Retests requested by the client for a finding or a whole project, on every plan. |
| CVSS | CVSS 3.1 or 4.0, with the vector derived as you choose the metrics. | CVSS 4.0, 3.1, 3.0 and 2.0. |
| Findings library | Write-ups saved once and reused with their scoring and remediation intact. | A findings library. |
| Issue trackers | Clients connect their own Jira (Cloud or Data Center), ServiceNow, Azure DevOps, GitHub, GitLab or Linear, and the ticket’s state is read back; any other system can take findings by webhook. | Jira, Azure DevOps and ServiceNow; ServiceNow syncs one way and is set up by the client. |
| Importing tool output | Sixteen formats imported as findings, including Nessus, Burp Suite, OpenVAS, Qualys, Nmap, ZAP, Nuclei and SARIF. | Imports from Burp, Nessus, Qualys, Nmap, Nexpose, ZAP, Acunetix, OpenVAS and Invicti, among others. |
| Pricing | Published: the Portal is £75 a tester a month for one ($99), falling with every tester added, with every feature included. Our reporting tool, the reporting on its own, is free and open source under the AGPL-3.0. | Published: Starter from €99 a month for up to five users and Professional from €549 with unlimited users; Enterprise and Ultimate by quote. |
| Trying it | A free trial of the Portal with no card required, whose days start when your portal goes live. The reporting tool is free to download and run. | A 15-day free trial. |
Facts about Cyver Core come from Cyver Core’s own website, its pricing, hosting, security, integrations and AI pages, its help centre and its announcements, read on 28 October 2026. Products change: if anything here is out of date, tell us and we will correct it. Product names are the trademarks of their owners, and Pental is not affiliated with any of them.
Cyver Core builds report templates in the platform, from sections and tokens styled with an uploaded CSS file, and exports reports to Word, HTML and PDF. Pental fills your own Word document, with your cover page, headers, fonts, tables and appendices, and reads an edited report back into the assessment.
Cyver’s copilot runs on Cyver’s own Azure OpenAI instance, which it says does not use customer data for training. Pental drafts on your own key with OpenAI, Anthropic or Groq, under your own terms with that provider, or on a model on your own hardware, where nothing leaves your network.
Cyver Core keeps its review workflow to Professional, from €549 a month, where your own domain is an add-on, included on Enterprise. Pental includes QA review and your own domain for every firm, from one tester.
Cyver hosts on Microsoft Azure, with data in the EU by default and the US or another region by arrangement, and offers private and on-premises deployments. Pental runs the software, and each firm’s data lives in its own Postgres database, in your own cloud, on a server of yours or on Supabase Cloud.
Cyver’s findings export, as CSV, Excel or XML, and its finding library go in Coming from another platform, under Settings, Data. Pental reads it, shows you the mapping with real values from your own data beside each field, and lets you correct it before a single row is written. Your findings come across, and the library goes into your library.
Pental fits a testing firm that wants its clients' findings in a database of its own, reports in its own Word template, a client portal under its own name and AI on its own key, with every feature included. See the pricing, or see the platform. For the reporting on its own, our free, open-source reporting tool runs on your own server.
The report template and the AI. Cyver Core builds templates inside the platform and styles them with CSS, and its copilot runs on Cyver’s own Azure OpenAI instance. Pental fills your own Word template, reads an edited report back, and drafts with your own AI key or a local model, and each firm’s data lives in the firm’s own Postgres database.
Cyver Core lists Starter from €99 a month for up to five users and Professional from €549 with unlimited users, with Enterprise and Ultimate by quote. Pental’s Portal is €85 a tester a month for one, falling as testers are added, with every feature included.
Cyver Core offers a 15-day free trial. Pental’s free trial needs no card, and its days start when your portal goes live, so setting up uses none of them.
Yes. A client can ask for a retest from the finding they are reading, and it arrives in one list for your team with the outcome recorded on the finding; closing a ticket in their own tracker asks for one too.
Cyver’s findings export, as CSV, Excel or XML, and its finding library go in Coming from another platform, under Settings, Data. Pental reads it, shows you the mapping with real values from your own data beside each field, and lets you correct it before a single row is written. Your findings come across, and the library goes into your library.
Set up your own database, upload your own Word template and take a real engagement through it, client portal and all. A free trial of the whole Portal, no card required, and its days start when your portal goes live.