Having used the platform extensively, this reviewer appreciates its strong focus on manual penetration testing for deeper, more accurate assessments. They report no major complaints, indicating an overall positive experience.
View Full Review
PentestPad has become the central platform for our penetration testing team, and honestly, it’s hard to imagine running engagements without it at this point. It’s not just a note-taking tool, it’s a full workflow solution tailored specifically for pentesters.
One of the biggest advantages for us is how well it structures the entire engagement lifecycle. From initial scoping to final reporting, everything lives in one place. The ability to organize findings, evidence, screenshots, and notes in a clean, hierarchical way means we no longer waste time digging through scattered files or switching between tools.
The reporting capabilities are where PentestPad really stands out. Generating professional, client-ready reports used to be one of the most time-consuming parts of our work. Now, with reusable templates and structured findings, we can produce consistent, high-quality reports in a fraction of the time. For example, instead of manually formatting each vulnerability, we maintain a library of standardized findings that can be quickly customized per engagement. This alone saves us several hours per project and ensures consistency across the team.
Collaboration is another major strength. Multiple team members can work on the same project simultaneously without stepping on each other’s toes. This has significantly improved how we handle larger engagements, everyone can contribute findings, add evidence, and review content in real time.
An unexpected benefit we discovered is how well it supports knowledge retention. Over time, our internal finding database has grown into a valuable knowledge base. We can quickly reuse past insights, payloads, and remediation guidance, which not only speeds up delivery but also improves overall quality.
Overall, PentestPad has streamlined our workflow, reduced reporting overhead, and improved collaboration across the team. It’s not just a tool we use, it’s become a core part of how we deliver penetration testing services. Review collected by and hosted on G2.com.
For now, we have not found any downsides of the product. Review collected by and hosted on G2.com.
Thank you for this incredibly thoughtful review — reading that PentestPad has become a core part of how your team delivers engagements is about the best thing we could hope to hear. We set out to build a full workflow solution for pentesters rather than just another note-taking tool, so it means a lot that it's landing that way for you.
It's great to hear how much the structured engagement lifecycle is helping — keeping scoping, findings, evidence, and notes organized in one place so no one is digging through scattered files. And the reporting workflow you described, maintaining a library of standardized findings and customizing them per engagement to save several hours a project, is exactly the kind of impact we hoped reusable templates and structured findings would have. We're just as glad the real-time collaboration is holding up on your larger engagements.
The point about knowledge retention is one we especially loved reading. Watching a team's finding database grow into a genuine internal knowledge base — reusable payloads, insights, and remediation guidance that speed up delivery and lift quality over time — is one of the most rewarding things to hear, and it's a benefit we think more teams should know about.
Thanks again for taking the time to write this, and for being part of the PentestPad community.
penetration testing report is easier then ever.
UI is intuitive and has integration with Jira - which is main benefit for our internal cooperation.
Performance are pretty fine, works like expected and report generation is fast. The Price justifies the service. Support is outstanding - issues are resolved in matter of hours. There are also AI features helping describe findings and also make them more clear for broader audiences. Review collected by and hosted on G2.com.
I haven’t found anything I dislike about this product. Review collected by and hosted on G2.com.
Thank you for the fantastic review! It's great to hear that PentestPad has made writing pentest reports easier than ever and that the Jira integration is supporting your internal collaboration so well. Reusable templates for each assessment type and for new vulnerabilities are exactly the kind of thing meant to save you time across projects, so we're glad they're working for you.
We're also thrilled the AI features are helping make findings clearer for broader audiences, and that fast report generation, solid performance, and fair pricing all add up to something worthwhile for your team. And we'll happily pass along your words about our support — resolving issues within hours is the standard we hold ourselves to, and it means a lot to hear it's landing that way.
Thanks again for being part of the PentestPad community.
PentestPad makes the client side of a pentest much more organized and professional. Instead of sending reports, updates, remediation notes, and retest requests back and forth over email, everything is managed in one place. The portal is clean and easy for clients to use, especially when requesting a new pentest, viewing reported findings, checking the status, and requesting a retest for a specific finding after it has been fixed. It saves time for both the client and the pentest team, reduces confusion, and makes the overall delivery process feel smoother, more transparent, and more professional. Review collected by and hosted on G2.com.
PentestPad is already strong for our workflow, so there is nothing major that I dislike. The main areas I would like to see improved are client-side SSO, more client-specific integrations, and better tracking for continuous pentest usage. For example, having integrations per client with tools like ServiceNow, Azure DevOps, GitHub Issues, Linear, or Jira would make it easier to fit into different clients’ existing ticketing and remediation workflows. Also, for continuous pentesting, a credit-based tracking feature would be useful so both we and the client can clearly monitor consumed effort, remaining balance, and overall usage over time. Review collected by and hosted on G2.com.
Thank you for such a thoughtful and detailed review — it means a lot to the whole team. We built PentestPad specifically to replace the scattered email-and-spreadsheet approach you described, so it's great to hear the portal is making delivery feel smoother, more transparent, and more professional for you and your clients. We're especially glad the AI summarizer and one-click report generation are saving you real time when writing findings and getting reports out the door.
Your suggestions on where we can go next are just as valuable. Client-side SSO, per-client integrations with tools like Jira, ServiceNow, Azure DevOps, GitHub Issues, and Linear, and credit-based tracking for continuous pentesting are all areas we want to get right, and I've shared your specific notes with our product team. Fitting cleanly into each client's existing ticketing and remediation workflow — and giving everyone clear visibility into consumed versus remaining effort — is exactly the kind of direction we're building toward.
Thanks again for taking the time to write this, and for being part of the PentestPad community. If you'd ever like to talk through any of these ideas in more detail, we'd love to hear from you.
Great customer support and plenty of integration possibilities. We also had a few custom modules built, and the support has been truly outstanding throughout.
From a team perspective, we rely most on the collaboration, project-tracking features, and retesting workflows. Multiple external vendors can work on our internal projects, and everything (findings, notes, and tasks) stays centralized in one place. Before using PentestPad, we relied on a mix of tools and spreadsheets.
The AI Assistant is also very useful, especially for remediations. It doesn’t replace expertise, but it speeds up the process, particularly when working on multiple projects in parallel. And then PentestPad is able to send the remediation steps directly to our Jira. Review collected by and hosted on G2.com.
A few features were a bit hard to find at first, so there’s a slight learning curve, but very efficient once adopted. Review collected by and hosted on G2.com.
Thank you for the kind words and for taking the time to share this. Support is something we care deeply about, so hearing that our team — including the work on your custom modules — has been outstanding genuinely makes our day.
It's great to hear how much your team leans on the collaboration, project-tracking, and retesting workflows, and that having multiple external vendors work on internal projects with findings, notes, and tasks all centralized has replaced the old mix of tools and spreadsheets. That's exactly the problem we set out to solve. We're also glad the AI Assistant is proving useful for remediations and parallel projects, and that sending remediation steps straight to Jira fits neatly into how your team already works.
You're right that a few features aren't as easy to find as they should be at first — that's fair feedback. Improving discoverability and onboarding is something we're actively working on so the learning curve is even shorter for new users. If there are specific spots that tripped you up, we'd genuinely like to know.
Thanks again for being part of the PentestPad community.
I love how the platform looks and how easy it is to go over the entire process, from writing the vulnerabilities all the way to the report generation. Since report generation is generally the most boring or tedious part of the job, it is really pleasant to write reports using PentestPad. It solves the problem of the tedious work of report writing. The initial setup was extremely easy. Additionally, it can import vulnerabilities from other software like Burp Suite, which is very handy. Review collected by and hosted on G2.com.
Nothing really, everything is great as it is Review collected by and hosted on G2.com.
the ability to automate reporting and the workflow of activities Review collected by and hosted on G2.com.
I’ve noticed a few minor functional bugs, but nothing serious to report at the moment. Review collected by and hosted on G2.com.
Thanks for the review! Automating the reporting phase and unifying it in one place is exactly what we set out to do, so it's great to hear it's saving you time on both reporting and workflow.
On the minor bugs — we'd genuinely appreciate knowing which ones you've run into. Even small functional issues are worth fixing, and reports like yours help us catch and prioritize them. Feel free to flag them to our support team anytime.
Thanks again for being part of the PentestPad community.
Pricing provided by PentestPad.