Moving From the Free Reporting Tool to Pental
What the Portal adds to our free reporting tool, what stays exactly as it is, and the three steps that bring your team, clients and findings across in one file.
Our free reporting tool is Pental’s reporting on its own. The Portal is all of it, and what it takes to sell pentesting as a service, run for you under your brand on a database your firm owns. When you want that, everything you have written comes across in one file, and your reporting carries on exactly as it is.
What the Portal adds
| What | What it does for the firm |
|---|---|
| Pentest as a service | Clients sign in to a portal on your own domain to read their findings, ask for retests and comment on the engagement, during it and long after it. What your clients see goes through it. |
| Live reporting | Show a finding to the client the day you confirm it, marked as a draft until it is written up, and nothing unfinished goes into the report. See live reporting with draft findings. |
| QA before anything goes out | One review queue, your own checklist, comments and suggested edits on the words themselves, and an optional AI reviewer. See reviewing a report before it goes out. |
| Credentials | Clients send their test credentials encrypted, for your lead tester to view once, and are reminded by email before an authenticated test starts while theirs are still outstanding. |
| And the rest | Attestation letters, findings pushed to your clients’ Jira, ServiceNow and other trackers with their state read back, and scanner output imported as findings. |
What stays as it is
Your fields and sections, the AI and your prompts, CVSS 3.1 or 4.0, the built-in PDF, your Word templates and the Document Builder, retests, the library and your brand are in both, so nothing about how your team writes a report changes. There is no server of yours to run for the Portal: Pental keeps it up to date, and tells you when your database has an update to take.
Move in three steps
- Download everything. In the free tool, Move to Pental, at the foot of the sidebar, walks you through the move. An administrator presses Download Everything for one .zip file, named pental-backup and the date, with your team, clients, assessments, findings, library, custom fields, sections, prompts, Word templates and uploaded files. Keep it as it is: there is no need to unzip it. Your AI key stays behind.
- Start your free trial. Start Free Trial opens Pental’s trial, with no card required. Its days start when your portal goes live, so setting up uses none of them.
- Upload the .zip in your new portal. Its setup asks for it at Bring Your Data Across, on the first card, the one for the move from our free reporting tool, and Settings, Data has the same card later. Drop the file on it or choose it.
Choose what comes across
Before anything is written, the portal shows what is in the file and lets you choose. Your team comes across person by person: each new person is invited (their account is made and they are emailed a link to sign in), added without an email (they sign in from the sign-in page with their email address when they are ready), or left out, and nobody is emailed unless you choose to invite them. Your clients, engagements and findings, the library, and your checklists and runbooks each come across or stay behind. Your branding stays the portal’s unless you choose the free tool’s, whose titles name the free tool. Your fields, sections and prompts, your company details and your AI settings each either replace the portal’s or leave the portal’s as they are, and your Word templates are added beside the portal’s, replace them, or stay behind. Your AI key never comes across: add it under Settings, AI. Then Bring it across does it, and says what came across and anything that could not be written, by name.
Your database
Every portal runs on a database your firm owns: PostgreSQL in your own cloud, self-hosted Supabase or Supabase Cloud, and you can move from one to another later with everything in it. Pental holds your account, subscription and domain routing, and cannot read your clients’ findings. Creating your database sets the three side by side.
What it costs
The Portal is priced per tester, a month, with every feature included, and the rate for each tester falls as you add testers. Your clients’ accounts are free. The pricing has the rates in your own currency, and the reporting tool stays free.
Worth doing first
- Download everything before you start the trial, so the file is in hand when the setup asks for it.
- Decide where your database will live: a portal needs one before it goes live.
- Read what your clients see before your first client signs in.
PTaaS for penetration testing firms explains what selling testing as a service changes for a firm.
Start the Move With a Free Trial
Download everything from the free tool, start a free trial of the Portal with no card required, and restore the file at Bring Your Data Across.
Only need the reporting? Our reporting tool is free and open source, on your own server.
Also Worth Reading
Self-Hosting a Free Pentest Reporting Tool
Install our free, open-source reporting tool with one command, share it with your team over Tailscale or your own domain, and keep it up to date and backed up.
Free ToolFrom Finding to Word Report in the Free Reporting Tool
A whole engagement in our free reporting tool: fields and sections your way, findings drafted from your evidence with AI on your own key, and the report in your own Word template.
Free ToolAI Pentest Report Writing in the Free Reporting Tool
Our free reporting tool drafts findings, summaries and sections with AI on your own key or your own hardware: what each AI button does, how to set a provider up, and where every request goes.
Setup guide
Prefer to watch it?
The whole setup recorded, with chapters you can jump to: registering, your own domain, your own database in any of three places, your own mail server, branding, the first sign-in, updating the database on Supabase Cloud, and moving the database if you change your mind.
- 0:00 · Registering, signing in, and the free trial
- 0:44 · Your name and your firm’s name
- 0:50 · Custom domain
- +6 more