Free Tool

Moving From the Free Reporting Tool to Pental

What the Portal adds to our free reporting tool, what stays exactly as it is, and the three steps that bring your team, clients and findings across in one file.

4 min read · Updated

Our free reporting tool is Pental’s reporting on its own. The Portal is all of it, and what it takes to sell pentesting as a service, run for you under your brand on a database your firm owns. When you want that, everything you have written comes across in one file, and your reporting carries on exactly as it is.

What the Portal adds

WhatWhat it does for the firm
Pentest as a serviceClients sign in to a portal on your own domain to read their findings, ask for retests and comment on the engagement, during it and long after it. What your clients see goes through it.
Live reportingShow a finding to the client the day you confirm it, marked as a draft until it is written up, and nothing unfinished goes into the report. See live reporting with draft findings.
QA before anything goes outOne review queue, your own checklist, comments and suggested edits on the words themselves, and an optional AI reviewer. See reviewing a report before it goes out.
CredentialsClients send their test credentials encrypted, for your lead tester to view once, and are reminded by email before an authenticated test starts while theirs are still outstanding.
And the restAttestation letters, findings pushed to your clients’ Jira, ServiceNow and other trackers with their state read back, and scanner output imported as findings.

What stays as it is

Your fields and sections, the AI and your prompts, CVSS 3.1 or 4.0, the built-in PDF, your Word templates and the Document Builder, retests, the library and your brand are in both, so nothing about how your team writes a report changes. There is no server of yours to run for the Portal: Pental keeps it up to date, and tells you when your database has an update to take.

Move in three steps

  1. Download everything. In the free tool, Move to Pental, at the foot of the sidebar, walks you through the move. An administrator presses Download Everything for one .zip file, named pental-backup and the date, with your team, clients, assessments, findings, library, custom fields, sections, prompts, Word templates and uploaded files. Keep it as it is: there is no need to unzip it. Your AI key stays behind.
  2. Start your free trial. Start Free Trial opens Pental’s trial, with no card required. Its days start when your portal goes live, so setting up uses none of them.
  3. Upload the .zip in your new portal. Its setup asks for it at Bring Your Data Across, on the first card, the one for the move from our free reporting tool, and Settings, Data has the same card later. Drop the file on it or choose it.
Move to Pental, at the foot of the free tool’s sidebar: what the Portal adds, and the three steps.Corvane SecurityIn our free reporting toolA demonstration: Corvane Security and its client are invented. Every screen is the real software.

Corvane SecurityIn our free reporting toolA demonstration: Corvane Security and its client are invented. Every screen is the real software.Drag sideways to see the whole screen.

Choose what comes across

Before anything is written, the portal shows what is in the file and lets you choose. Your team comes across person by person: each new person is invited (their account is made and they are emailed a link to sign in), added without an email (they sign in from the sign-in page with their email address when they are ready), or left out, and nobody is emailed unless you choose to invite them. Your clients, engagements and findings, the library, and your checklists and runbooks each come across or stay behind. Your branding stays the portal’s unless you choose the free tool’s, whose titles name the free tool. Your fields, sections and prompts, your company details and your AI settings each either replace the portal’s or leave the portal’s as they are, and your Word templates are added beside the portal’s, replace them, or stay behind. Your AI key never comes across: add it under Settings, AI. Then Bring it across does it, and says what came across and anything that could not be written, by name.

Your database

Every portal runs on a database your firm owns: PostgreSQL in your own cloud, self-hosted Supabase or Supabase Cloud, and you can move from one to another later with everything in it. Pental holds your account, subscription and domain routing, and cannot read your clients’ findings. Creating your database sets the three side by side.

What it costs

The Portal is priced per tester, a month, with every feature included, and the rate for each tester falls as you add testers. Your clients’ accounts are free. The pricing has the rates in your own currency, and the reporting tool stays free.

Worth doing first

  • Download everything before you start the trial, so the file is in hand when the setup asks for it.
  • Decide where your database will live: a portal needs one before it goes live.
  • Read what your clients see before your first client signs in.

PTaaS for penetration testing firms explains what selling testing as a service changes for a firm.


Start the Move With a Free Trial

Download everything from the free tool, start a free trial of the Portal with no card required, and restore the file at Bring Your Data Across.

Only need the reporting? Our reporting tool is free and open source, on your own server.


Also Worth Reading

Setup guide

Prefer to watch it?

The whole setup recorded, with chapters you can jump to: registering, your own domain, your own database in any of three places, your own mail server, branding, the first sign-in, updating the database on Supabase Cloud, and moving the database if you change your mind.

  • 0:00 · Registering, signing in, and the free trial
  • 0:44 · Your name and your firm’s name
  • 0:50 · Custom domain
  • +6 more