Switching Off the Parts of the Platform You Do Not Use
Settings, then Feature Modules. A module that is off disappears for everyone, its pages included, and everything in it is kept for the day you switch it back on.
Not every firm wants the same navigation, and a screen nobody opens is still a screen everybody scrolls past. Feature Modules, a tab of its own in Settings, is where an administrator decides which parts of the portal exist for the team. The same list is a step of the setup wizard, and Save Modules keeps what you tick.
What you can switch
Every module below is on for a new firm, so the question is only which ones you do not need.
| Module | What it is |
|---|---|
| Dashboard | The landing page, with an overview of active work. Off, everybody lands on the first area they can open instead, which for most people is Assessments. |
| Assessments | Engagements, phases, findings and the reports that come out of them. Off hides the area; nothing is deleted, and documents already made stay downloadable. |
| QA Queue | A second pair of eyes on a report before it goes out: comments, suggested changes and sign-off. Off, a report is ready to deliver as soon as testing is finished, and anybody who can edit may deliver it. |
| Library | Your own library of reusable findings, with the wording your team has already agreed. Off hides the area, and the entries are kept. |
| Checklists & Runbooks | Methodology checklists and step-by-step runbooks attached to phases, with a library of checklists on the published standards, each suggested on its kind of phase once added. |
| Testing Calendar | A week view of scheduled testing: who is on what, and when. |
| Feedback | Client feedback and ratings. |
Checklists & Runbooks has the same switch in its own settings tab, Enable Checklists & Runbooks, which says what happens when it is off: the per-phase checklist dropdowns and tester panels are hidden everywhere, and the templates remain saved. The tab goes with it, so it is switched back on here, in Feature Modules. Checklists and runbooks covers the rest of that screen, and the findings Library the Library.
One module starts off
External testers is the module a new firm starts without, because handing work to people outside your firm is a choice to make deliberately. Tick it and press Save Modules when you bring in external testers, alone or as a team from another consultancy, to take your overflow work, and an External tab appears in the sidebar for them; external testers and teams for overflow pentest work covers the rest. Switched off again, an external tester’s account opens nothing until it is back on.
Assessments for one client
Assessments can also be switched off for a single client while the rest of the firm keeps them. On the client’s page, untick This customer may have assessments, or Assessments for this client when you add them. The area is hidden for them and their portal users; nothing is deleted, and the documents they already have stay downloadable.
What happens when a module is off
It goes for everyone, from navigation and from the pages themselves: a bookmarked address for one of its pages takes the person to the first area they can open instead. Nothing is deleted, so switching a module back on returns you to what you had rather than to an empty screen.
This is a visibility decision, not a deletion. The rows behind a module stay in your database untouched, which is also why turning something off is safe to try.
What goes with a module
A module takes with it everything that only serves it, so nobody is asked about a part of the portal the firm does not use: its tab in Settings, its steps in the setup wizard, its cards on the dashboard, its buttons on other pages and its emails in Email Templates. Something two modules share stays while either is on, and a setting that is no longer shown keeps its value for the day the module comes back.
| Switched off | What goes with it |
|---|---|
| Assessments | The Assessments, Attestation and Checklists & Runbooks tabs in Settings, the engagement steps of the setup wizard, the engagement cards on the dashboard, New Assessment on a client’s page, and the emails about engagements. A client’s page keeps its Assessments card while that client has assessments, so their documents can still be downloaded. |
| QA Queue | The QA Queue card on the dashboard. A report ready to deliver opens its assessment, where Deliver is. |
| Library | Import from Library, the Library button on a finding, Add to Library, the Reuse column in Settings, Findings, and adding every new finding to the Library automatically. Each field keeps its reuse setting. |
| Checklists & Runbooks | Its tab in Settings, the template choice on a phase, the panels testers tick through, and the Methodology step of the setup wizard. |
| Feedback | Its tab in Settings and the feedback cards on the dashboard. |
| Dashboard | Its tab in Settings and the Dashboard step of the setup wizard. |
What has no switch
Clients, the Findings list, the client portal, your users and Settings are always there: they are the platform itself, and everything above is arrangement around them. The QA review explains what changes in delivery when the QA Queue is off. The platform overview shows how the modules fit together.
Try This on Your Own Database
Pental runs on a Postgres database you own, under your own brand, with the AI on your own key. The trial is the whole platform.
Only need the reporting? Our reporting tool is free and open source, on your own server.
Also Worth Reading
Putting Your Portal on Your Own Domain
One DNS record, sometimes a second to prove the domain is yours, then the portal verifies it and issues a certificate. Most failures are the same four causes, and the setup screen tells you which one you have hit.
SetupSending Portal Email from Your Own Domain
The connection is set on your pental.io dashboard, the wording in the portal. Connect your mailbox and your own side sends the portal’s email; until then it goes out through Pental.
SetupSingle Sign-On Under Your Own Name
Register a Google or Microsoft application of your own, paste the two values into your portal, and the consent screen your team and your clients see carries your name instead of ours. The redirect URI is the part people get wrong.
Setup guide
Prefer to watch it?
The whole setup recorded, with chapters you can jump to: registering, your own domain, your own database in any of three places, your own mail server, branding, the first sign-in, updating the database on Supabase Cloud, and moving the database if you change your mind.
- 0:00 · Registering, signing in, and the free trial
- 0:44 · Your name and your firm’s name
- 0:50 · Custom domain
- +6 more