Dradis is self-hosted only, so your firm runs the application, and its paid plans start at three seats billed a year in advance, with issue trackers and retest tracking kept to Remediate. Pental runs the Portal for you while your data stays in your own Postgres database, charges per tester with no minimum, and includes every feature; its reporting on its own is free and open source for the firm that would rather host it. Here is the comparison, from each one’s own published information.
Each of Dradis's answers is taken from its own website or documentation, and each of Pental's from the screens it describes. Where Dradis's documentation does not cover something, the line says so rather than guessing.
| Compared | Pental | Dradis |
|---|---|---|
| Built for | Penetration testing firms of every size, with every feature at any size: the Portal priced per tester, the rate falling as a team grows, and our free, open-source reporting tool for a firm that wants only the reporting. | Consultancies (Assess), internal security teams (Remediate), and large or regulated teams (Enterprise). |
| Hosting and data | The Portal: Pental runs the software and your firm holds the data, in its own Postgres database: in your own cloud, on a server of yours or on Supabase Cloud, where Pental cannot read your findings. The free reporting tool runs on your own server, beside its own PostgreSQL. | Self-hosted only, on infrastructure you control: your own server, your own AWS, Azure or Google Cloud account, or an air-gapped network. There is no hosted Dradis. |
| Client portal | A standing account for each client with every report, finding, retest outcome and attestation letter. Findings arrive when you release them, and questions are raised on the finding. | A client portal on the paid plans, where clients read findings, ask the testers about them and download deliverables, with unlimited contributor accounts. |
| Your brand | Your own domain with TLS issued automatically, your sign-in page, email from your own address, and no Pental branding anywhere. | Your logo and brand colour across the portal. |
| Report templates | Your own Word template, with your cover page, headers, fonts, tables and appendices, or the built-in PDF. The same engagement renders the same file every time. | Word templates built with content controls, which Dradis builds for you on its paid plans. Output in Word, Excel, CSV, HTML and PDF. |
| Editing the report in Word | Upload the edited report and the assessment updates to match, item by item, only where you tick. A reviewer’s tracked changes arrive as suggested edits. | Reports can be opened in Word for final edits; reading an edited report back is not described. |
| AI | Your own key with OpenAI, Anthropic or Groq, or a model on your own hardware through Ollama or any compatible endpoint. Every prompt can be read and rewritten. | Echo, included since Dradis 5.0: a local Ollama model, or OpenAI, Anthropic or Google Gemini on your own key, or your own compatible endpoint. |
| QA review | Draft, in review and approved, with suggested edits made on the field itself, the firm’s own QA checklist ticked before a report can be approved, an AI reviewer if the firm turns it on, and release waiting for approval. | Draft and ready-for-review states, reviewer roles that control who can publish, and inline comments, on the paid plans. |
| Retests | Clients ask from the finding they are reading, or by closing a ticket in their own tracker. Every finding is tracked as fixed, still open or newly introduced. | Remediation tracking, with a ready-for-re-test state, on the Remediate plan. |
| CVSS | CVSS 3.1 or 4.0, with the vector derived as you choose the metrics. | A CVSS 4.0 calculator that also handles 3.1 and 3.0. |
| Findings library | Write-ups saved once and reused with their scoring and remediation intact. | An issue library, with over 60 entries to start from. |
| Issue trackers | Clients connect their own Jira (Cloud or Data Center), ServiceNow, Azure DevOps, GitHub, GitLab or Linear, and the ticket’s state is read back; any other system can take findings by webhook. | Jira, ServiceNow and Azure DevOps, on the Remediate plan. |
| Importing tool output | Sixteen formats imported as findings, including Nessus, Burp Suite, OpenVAS, Qualys, Nmap, ZAP, Nuclei and SARIF. | Imports from tools including Burp Suite, Nessus, Nmap, Qualys and ZAP, and any CSV file as it is. |
| Pricing | Published: the Portal is £75 a tester a month for one ($99), falling with every tester added, with every feature included. Our reporting tool, the reporting on its own, is free and open source under the AGPL-3.0. | Published: Assess $100 (£80) per seat a month and Remediate $200 (£160), billed yearly in advance with a three-seat minimum, and Enterprise from five seats, by quote. |
| Trying it | A free trial of the Portal with no card required, whose days start when your portal goes live. The reporting tool is free to download and run. | A 14-day trial of the paid plans, and a free Community Edition under GPLv2, for one engagement at a time. |
Facts about Dradis come from Dradis’s own website, its pricing, integrations, security and Community Edition pages, its support guides, and its public source code and changelog, read on 28 October 2026. Products change: if anything here is out of date, tell us and we will correct it. Product names are the trademarks of their owners, and Pental is not affiliated with any of them.
Dradis is self-hosted only: a server in your rack, your own cloud account or an air-gapped network, and there is no hosted Dradis. Pental keeps the ownership without the application to run: Pental runs the Portal, and your data lives in your own Postgres database, in your own cloud, on a server of yours or on Supabase Cloud. Pental’s free, open-source reporting tool is the other way: on a server of yours, run by you, as Dradis is.
Dradis Assess costs $100 (£80) per seat a month, billed yearly in advance, with a three-seat minimum: $3,600 (£2,880) a year before anyone writes a finding. Three testers on Pental’s Portal are £198 ($267) a month, or £2,178 ($2,937) a year, with every feature included, and one tester can start on their own.
Dradis connects Jira, ServiceNow and Azure DevOps, and tracks remediation with a ready-for-re-test state, on its Remediate plan at $200 (£160) per seat a month. Pental includes two-way Jira, ServiceNow, Azure DevOps, GitHub, GitLab and Linear, and client-requested retests, for every tester.
On its paid plans Dradis builds your Word template for you, using Word’s content controls, and its reports can be opened in Word for final edits. In Pental you build the template yourself by clicking on your own document, and an edited report uploaded back updates the assessment item by item, only where you tick.
A Dradis project export, as XML or as the package ZIP with its attachments, or its CSV export goes in Coming from another platform, under Settings, Data. Pental reads it, shows you the mapping with real values from your own data beside each field, and lets you correct it before a single row is written. Your clients, engagements and findings come across.
Pental fits a testing firm that wants its clients' findings in a database of its own, reports in its own Word template, a client portal under its own name and AI on its own key, with every feature included. See the pricing, or see the platform. For the reporting on its own, our free, open-source reporting tool runs on your own server.
Who runs the application. Dradis is self-hosted only, so you run the whole application on infrastructure you control. Pental runs the Portal for you and keeps each firm’s data in the firm’s own Postgres database, so you hold the data without running the application yourself. Pental’s reporting on its own is free and open source, for a firm that would rather run it.
Dradis Community Edition is free and open source, under GPLv2, for one engagement at a time. The paid plans, Assess and Remediate, are priced per seat, with a three-seat minimum, billed yearly in advance.
Dradis Assess is $100 (£80) per seat a month, billed yearly with a minimum of three seats, which is $3,600 (£2,880) a year. Three testers on Pental’s Portal are £198 ($267) a month or £2,178 ($2,937) a year, paid monthly or yearly.
Yes. Echo, included since Dradis 5.0, drafts with a local Ollama model, and since 5.1 with OpenAI, Anthropic or Google Gemini on your own key. Pental drafts with your own OpenAI, Anthropic or Groq key, or with Ollama or any compatible endpoint you host.
A Dradis project export, as XML or as the package ZIP with its attachments, or its CSV export goes in Coming from another platform, under Settings, Data. Pental reads it, shows you the mapping with real values from your own data beside each field, and lets you correct it before a single row is written. Your clients, engagements and findings come across.
Set up your own database, upload your own Word template and take a real engagement through it, client portal and all. A free trial of the whole Portal, no card required, and its days start when your portal goes live.