--- title: PentestPad Reviews meta\_title: 'PentestPad Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter reviews by the users' company size, role or industry to find out how PentestPad works for a business like yours. aggregate\_rating: rating\_value: 5.0 review\_count: 7 scale: '5' date\_modified: '2026-09-01' parent\_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- # PentestPad Reviews & Product Details Visit Website PentestPad is a penetration testing reporting platform used by offensive security consultancies, managed security service providers, and in-house red teams to manage engagements end-to-end and deliver client-ready reports. Testers create projects, capture findings with evidence and CVSS scoring, and collaborate in a shared editor where an AI assistant drafts finding descriptions, impact statements, and remediation guidance based on the vulnerability context already entered. Existing DOCX report templates can be imported and rebuilt inside PentestPad at no additional cost, so consultancies retain their established report style rather than adopt a vendor template. Scanner output from Nessus, Burp Suite, Nuclei, and custom feeds can be imported directly into a project, and finished reports export to DOCX, PDF, and XLSX. It consolidates project planning, collaborative finding management, AI-assisted report writing, and client delivery into a single web application. PentestPad is available as a managed EU-hosted cloud service and as a fully self-hosted installation for air-gapped and regulated environments. The AI assistant can be configured to use a self-hosted language model so client data never leaves the customer's infrastructure. PentestPad is ISO 27001 certified, GDPR compliant, EU-hosted by default, and priced publicly per seat. * * * Product Website PentestPad Seller [PentestPad](https://www.g2.com/sellers/pentestpad) Discussions [PentestPad Community](https://www.g2.com/products/pentestpad/discuss) Languages Supported English Overview by Luka Sikic (Co-founder @ PentestPad & SecureBlock | OSCP | OSWE) Show More ## Pricing Pricing provided by PentestPad. ### Professional €49.00 1 Users Per Month ### Business €129.00 1 Users Per Month [ View More Pricing Information ](https://www.g2.com/products/pentestpad/pricing) ## Top-Rated Alternatives [ ![Aikido Security](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Aikido Security") Aikido Security 4.6/5(259) ](https://www.g2.com/products/aikido-security/reviews) [ ![vPenTest](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "vPenTest") vPenTest 4.6/5(245) ](https://www.g2.com/products/vpentest/reviews) [ ![Astra Pentest](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Astra Pentest") Astra Pentest 4.6/5(235) ](https://www.g2.com/products/astra-pentest/reviews) [ View All Alternatives ](https://www.g2.com/products/pentestpad/competitors/alternatives) ## User Insights Average based on 7 real user reviews. Typical contract price $0k - $0k [Sign in to view](/login) Per Month [Log in to unlock pricing and user insights](/login) ## PentestPad Integrations (4) What do users say about integrations? Integration information sourced from real user reviews. ![Verified User in Information Technology and Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Information Technology and Services") UI Verified User in Information Technology and Services (This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture.) Small-Business (50 or fewer emp.) 7/1/2026 "Strong Manual Pentesting and Professional Reporting Experience with PentestPad" 5/5 What do you like best about PentestPad? What I like most about PentestPad is their strong focus on manual penetration testing, which I really appreciate because it allows for deeper and more accurate security assessments compared to relying heavily on automated tools. I also find their reporting platform excellent. It is well structured, easy to use, and makes documenting findings much more efficient. Additionally, the communication with clients is very smooth and professional, which significantly improves collaboration throughout the engagement. Review collected by and hosted on G2.com. What do you dislike about PentestPad? I do not have any major complaints. Overall, my experience with PentestPad has been very positive so far. Review collected by and hosted on G2.com. What problems is PentestPad solving and how is that benefiting you? PentestPad helps solve key challenges around visibility, organization, and communication during security assessments. It gives us a clear and structured way to track findings, understand identified risks, and follow remediation progress. The platform makes reports easy to review and helps ensure nothing important gets overlooked. For us, the biggest benefit is having better insight into our security posture and a more efficient way to collaborate throughout the testing process. Review collected by and hosted on G2.com. Show More Response from Luka Sikic of PentestPad [Editedit](https://www.g2.com/survey_responses/pentestpad-review-13054918/official_response/edit) Thank you for the great review! We're especially glad the focus on manual penetration testing resonates with you — supporting deeper, more accurate assessments rather than leaning on automated tools is core to how we think about the platform, so it's rewarding to hear that come through. It's also great to hear the reporting platform is making documentation more efficient, and that client communication has felt smooth and professional throughout your engagements. Giving teams a clear, structured way to track findings, understand risk, and follow remediation progress — so nothing important slips through — is exactly what we set out to do, and we're glad it's translating into better insight into your security posture. Thanks again for being part of the PentestPad community. Current User (The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.)Validated Reviewer (Validated through a business email account added to their profile)Incentivized (This reviewer was offered a nominal incentive as thanks for completing this review.)Source: Seller invite (Invitation from a seller or affiliate. This reviewer was offered a nominal incentive as thanks for completing this review.) (Copy Review URL) ![Leo V.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Leo V.") LV Leo V. Chief Executive Officer Small-Business (50 or fewer emp.) 4/15/2026 "PentestPad Streamlines Our Pentest Workflow with Fast, Client-Ready Reporting" 5/5 What do you like best about PentestPad? PentestPad has become the central platform for our penetration testing team, and honestly, it’s hard to imagine running engagements without it at this point. It’s not just a note-taking tool, it’s a full workflow solution tailored specifically for pentesters. One of the biggest advantages for us is how well it structures the entire engagement lifecycle. From initial scoping to final reporting, everything lives in one place. The ability to organize findings, evidence, screenshots, and notes in a clean, hierarchical way means we no longer waste time digging through scattered files or switching between tools. The reporting capabilities are where PentestPad really stands out. Generating professional, client-ready reports used to be one of the most time-consuming parts of our work. Now, with reusable templates and structured findings, we can produce consistent, high-quality reports in a fraction of the time. For example, instead of manually formatting each vulnerability, we maintain a library of standardized findings that can be quickly customized per engagement. This alone saves us several hours per project and ensures consistency across the team. Collaboration is another major strength. Multiple team members can work on the same project simultaneously without stepping on each other’s toes. This has significantly improved how we handle larger engagements, everyone can contribute findings, add evidence, and review content in real time. An unexpected benefit we discovered is how well it supports knowledge retention. Over time, our internal finding database has grown into a valuable knowledge base. We can quickly reuse past insights, payloads, and remediation guidance, which not only speeds up delivery but also improves overall quality. Overall, PentestPad has streamlined our workflow, reduced reporting overhead, and improved collaboration across the team. It’s not just a tool we use, it’s become a core part of how we deliver penetration testing services. Review collected by and hosted on G2.com. What do you dislike about PentestPad? For now, we have not found any downsides of the product. Review collected by and hosted on G2.com. What problems is PentestPad solving and how is that benefiting you? Penetration testing and client reporting, team collaboration. Review collected by and hosted on G2.com. Show More Response from Luka Sikic of PentestPad [Editedit](https://www.g2.com/survey_responses/pentestpad-review-12631936/official_response/edit) Thank you for this incredibly thoughtful review — reading that PentestPad has become a core part of how your team delivers engagements is about the best thing we could hope to hear. We set out to build a full workflow solution for pentesters rather than just another note-taking tool, so it means a lot that it's landing that way for you. It's great to hear how much the structured engagement lifecycle is helping — keeping scoping, findings, evidence, and notes organized in one place so no one is digging through scattered files. And the reporting workflow you described, maintaining a library of standardized findings and customizing them per engagement to save several hours a project, is exactly the kind of impact we hoped reusable templates and structured findings would have. We're just as glad the real-time collaboration is holding up on your larger engagements. The point about knowledge retention is one we especially loved reading. Watching a team's finding database grow into a genuine internal knowledge base — reusable payloads, insights, and remediation guidance that speed up delivery and lift quality over time — is one of the most rewarding things to hear, and it's a benefit we think more teams should know about. Thanks again for taking the time to write this, and for being part of the PentestPad community. Current User (The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.)Validated Reviewer (Validated through LinkedIn)Incentivized (This reviewer was offered a nominal gift card as thank you for completing this review.)Source: G2 invite (Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.) (Copy Review URL) ![Schiller C.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Schiller C.") SC Schiller C. IoT & Application Security Engineer Small-Business (50 or fewer emp.) 4/27/2026 "PentestPad - Game-changer for team collaboration" 5/5 What do you like best about PentestPad? penetration testing report is easier then ever. UI is intuitive and has integration with Jira - which is main benefit for our internal cooperation. Performance are pretty fine, works like expected and report generation is fast. The Price justifies the service. Support is outstanding - issues are resolved in matter of hours. There are also AI features helping describe findings and also make them more clear for broader audiences. Review collected by and hosted on G2.com. What do you dislike about PentestPad? I haven’t found anything I dislike about this product. Review collected by and hosted on G2.com. What problems is PentestPad solving and how is that benefiting you? Writing penetration testing reports is much easier with this tool. It provides helpful templates for each type of assessment, as well as templates for new vulnerabilities that I can reuse across other projects. It also supports collaboration between different people within the tool, and being able to track and fix issues during the penetration test improves efficiency and makes retesting mitigations faster. Review collected by and hosted on G2.com. Show More Response from Luka Sikic of PentestPad [Editedit](https://www.g2.com/survey_responses/pentestpad-review-12693024/official_response/edit) Thank you for the fantastic review! It's great to hear that PentestPad has made writing pentest reports easier than ever and that the Jira integration is supporting your internal collaboration so well. Reusable templates for each assessment type and for new vulnerabilities are exactly the kind of thing meant to save you time across projects, so we're glad they're working for you. We're also thrilled the AI features are helping make findings clearer for broader audiences, and that fast report generation, solid performance, and fair pricing all add up to something worthwhile for your team. And we'll happily pass along your words about our support — resolving issues within hours is the standard we hold ourselves to, and it means a lot to hear it's landing that way. Thanks again for being part of the PentestPad community. Current User (The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.)Validated Reviewer (This review contains authentic analysis and has been reviewed by our team)Source: Seller invite (Invitation from a seller or affiliate. This reviewer was not provided any incentive by G2 for completing this review.) (Copy Review URL) ![Verified User in Computer & Network Security](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer & Network Security") IC Verified User in Computer & Network Security (This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture.) Small-Business (50 or fewer emp.) 5/14/2026 "Smooth Pentest Management from Start to Finish" 5/5 What do you like best about PentestPad? PentestPad makes the client side of a pentest much more organized and professional. Instead of sending reports, updates, remediation notes, and retest requests back and forth over email, everything is managed in one place. The portal is clean and easy for clients to use, especially when requesting a new pentest, viewing reported findings, checking the status, and requesting a retest for a specific finding after it has been fixed. It saves time for both the client and the pentest team, reduces confusion, and makes the overall delivery process feel smoother, more transparent, and more professional. Review collected by and hosted on G2.com. What do you dislike about PentestPad? PentestPad is already strong for our workflow, so there is nothing major that I dislike. The main areas I would like to see improved are client-side SSO, more client-specific integrations, and better tracking for continuous pentest usage. For example, having integrations per client with tools like ServiceNow, Azure DevOps, GitHub Issues, Linear, or Jira would make it easier to fit into different clients’ existing ticketing and remediation workflows. Also, for continuous pentesting, a credit-based tracking feature would be useful so both we and the client can clearly monitor consumed effort, remaining balance, and overall usage over time. Review collected by and hosted on G2.com. What problems is PentestPad solving and how is that benefiting you? Before using PentestPad, managing pentest requests, findings, remediation updates, retest follow-ups, and report delivery could easily become scattered across emails, spreadsheets, and separate trackers. PentestPad solves this by giving us and our clients one clear portal to manage the full pentest workflow. Clients can request a new pentest, view reported findings, track remediation status, and request a retest for a specific finding after fixing it. One of the biggest benefits for us is how much time it saves when writing and managing findings, as the AI summarizer helps us write finding details in a clearer and more structured way, making the finding-writing process faster and easier to refine. Once the findings are ready, we can generate the final report with a single button click using our own customizable template, and the findings are automatically populated into Word and PDF formats. Clients can also download the final report directly from the portal, which keeps everything organized, professional, and easier to manage across multiple clients and engagements. Review collected by and hosted on G2.com. Show More Response from Luka Sikic of PentestPad [Editedit](https://www.g2.com/survey_responses/pentestpad-review-12809348/official_response/edit) Thank you for such a thoughtful and detailed review — it means a lot to the whole team. We built PentestPad specifically to replace the scattered email-and-spreadsheet approach you described, so it's great to hear the portal is making delivery feel smoother, more transparent, and more professional for you and your clients. We're especially glad the AI summarizer and one-click report generation are saving you real time when writing findings and getting reports out the door. Your suggestions on where we can go next are just as valuable. Client-side SSO, per-client integrations with tools like Jira, ServiceNow, Azure DevOps, GitHub Issues, and Linear, and credit-based tracking for continuous pentesting are all areas we want to get right, and I've shared your specific notes with our product team. Fitting cleanly into each client's existing ticketing and remediation workflow — and giving everyone clear visibility into consumed versus remaining effort — is exactly the kind of direction we're building toward. Thanks again for taking the time to write this, and for being part of the PentestPad community. If you'd ever like to talk through any of these ideas in more detail, we'd love to hear from you. 6/3/2026 (At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review.) Current User (The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.)Validated Reviewer (Validated through LinkedIn)Source: Seller invite (Invitation from a seller or affiliate. This reviewer was not provided any incentive by G2 for completing this review.) (Copy Review URL) ![Verified User in Industrial Automation](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Industrial Automation") UI Verified User in Industrial Automation (This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture.) Mid-Market (51-1000 emp.) 4/28/2026 "Great Support and Centralized, Efficient Cybersec Management" 5/5 What do you like best about PentestPad? Great customer support and plenty of integration possibilities. We also had a few custom modules built, and the support has been truly outstanding throughout. From a team perspective, we rely most on the collaboration, project-tracking features, and retesting workflows. Multiple external vendors can work on our internal projects, and everything (findings, notes, and tasks) stays centralized in one place. Before using PentestPad, we relied on a mix of tools and spreadsheets. The AI Assistant is also very useful, especially for remediations. It doesn’t replace expertise, but it speeds up the process, particularly when working on multiple projects in parallel. And then PentestPad is able to send the remediation steps directly to our Jira. Review collected by and hosted on G2.com. What do you dislike about PentestPad? A few features were a bit hard to find at first, so there’s a slight learning curve, but very efficient once adopted. Review collected by and hosted on G2.com. What problems is PentestPad solving and how is that benefiting you? Before using PentestPad, we struggled with fragmented penetration testing processes across internal teams and external vendors. Reports were delivered in different formats, tracking findings and remediation was mostly manual, and aligning everything with our internal processes (especially Jira) required significant effort. With the tool, we now have a centralized platform where all testing activities, findings, and reports are standardized and managed in one place. Both internal teams and external vendors work within the same structure, which significantly improves consistency and visibility. One of the biggest improvements is in remediation tracking. Instead of manually transferring findings into Jira, tasks can be created directly, which reduces the risk of errors and saves several hours per engagement. This also makes it much easier to track progress and ensure accountability across teams. Reporting has also become much easier. What previously took several hours per report is now reduced to under an hour. Overall, good value for money. Review collected by and hosted on G2.com. Show More Response from Luka Sikic of PentestPad [Editedit](https://www.g2.com/survey_responses/pentestpad-review-12699285/official_response/edit) Thank you for the kind words and for taking the time to share this. Support is something we care deeply about, so hearing that our team — including the work on your custom modules — has been outstanding genuinely makes our day. It's great to hear how much your team leans on the collaboration, project-tracking, and retesting workflows, and that having multiple external vendors work on internal projects with findings, notes, and tasks all centralized has replaced the old mix of tools and spreadsheets. That's exactly the problem we set out to solve. We're also glad the AI Assistant is proving useful for remediations and parallel projects, and that sending remediation steps straight to Jira fits neatly into how your team already works. You're right that a few features aren't as easy to find as they should be at first — that's fair feedback. Improving discoverability and onboarding is something we're actively working on so the learning curve is even shorter for new users. If there are specific spots that tripped you up, we'd genuinely like to know. Thanks again for being part of the PentestPad community. 5/30/2026 (At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review.) Current User (The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.)Validated Reviewer (Validated through LinkedIn)Source: Organic (Organic review. This review was written entirely without invitation or incentive from G2, a seller, or an affiliate.) (Copy Review URL) ![Verified User in Information Technology and Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Information Technology and Services") CI Verified User in Information Technology and Services (This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture.) Small-Business (50 or fewer emp.) 7/3/2026 "Effortless Report Generation with PentestPad" 5/5 What do you like best about PentestPad? I love how the platform looks and how easy it is to go over the entire process, from writing the vulnerabilities all the way to the report generation. Since report generation is generally the most boring or tedious part of the job, it is really pleasant to write reports using PentestPad. It solves the problem of the tedious work of report writing. The initial setup was extremely easy. Additionally, it can import vulnerabilities from other software like Burp Suite, which is very handy. Review collected by and hosted on G2.com. What do you dislike about PentestPad? Nothing really, everything is great as it is Review collected by and hosted on G2.com. What problems is PentestPad solving and how is that benefiting you? I use PentestPad for report generation during penetration engagements. It solves the tedious work of report writing, making it pleasant to write reports. The platform's ease and navigation from writing vulnerabilities to report generation are great. Review collected by and hosted on G2.com. Show More Current User (The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.)Validated Reviewer (Validated through LinkedIn)Incentivized (This reviewer was offered a nominal incentive as thanks for completing this review.)Source: Seller invite (Invitation from a seller or affiliate. This reviewer was offered a nominal incentive as thanks for completing this review.) (Copy Review URL) ![Verified User in Computer & Network Security](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer & Network Security") AC Verified User in Computer & Network Security (This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture.) Small-Business (50 or fewer emp.) 5/18/2026 "Automated Workflows That Save Time" 5/5 What do you like best about PentestPad? the ability to automate reporting and the workflow of activities Review collected by and hosted on G2.com. What do you dislike about PentestPad? I’ve noticed a few minor functional bugs, but nothing serious to report at the moment. Review collected by and hosted on G2.com. What problems is PentestPad solving and how is that benefiting you? Unify the reporting phase. Review collected by and hosted on G2.com. Show More Response from Luka Sikic of PentestPad [Editedit](https://www.g2.com/survey_responses/pentestpad-review-12828269/official_response/edit) Thanks for the review! Automating the reporting phase and unifying it in one place is exactly what we set out to do, so it's great to hear it's saving you time on both reporting and workflow. On the minor bugs — we'd genuinely appreciate knowing which ones you've run into. Even small functional issues are worth fixing, and reports like yours help us catch and prioritize them. Feel free to flag them to our support team anytime. Thanks again for being part of the PentestPad community. 5/22/2026 (At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review.) Current User (The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.)Validated Reviewer (Validated through a business email account)Source: Seller invite (Invitation from a seller or affiliate. This reviewer was not provided any incentive by G2 for completing this review.) (Copy Review URL) ## Pricing Options Pricing provided by PentestPad. ### Professional €49.00 1 Users Per Month ### Business €129.00 1 Users Per Month [ View More Pricing Information ](https://www.g2.com/products/pentestpad/pricing) ##### Categories on G2 [Penetration Testing](https://www.g2.com/categories/penetration-testing-tools) ##### Explore More [Top network monitoring software recommended for tech companies](https://www.g2.com/discussions/top-network-monitoring-software-recommended-for-tech-companies)[Top tools for visualizing customer experience flows](https://www.g2.com/discussions/what-are-the-top-tools-for-visualizing-customer-experience-flows)[Which Contact Center AI Observability solutions automatically maintain audit trails and compliance documentation for regulated contact center environments?](https://www.g2.com/discussions/which-contact-center-ai-observability-solutions-automatically-maintain-audit-trails-and-compliance-documentation-for-regulated-contact-center-environments) [Is Autodesk Civil 3D worth the subscription for a small civil engineering firm?](https://www.g2.com/discussions/is-autodesk-civil-3d-worth-the-subscription-for-a-small-civil-engineering-firm)[What is the best desktop image optimization software for designers who need to reduce file size before delivery without the output looking noticeably compressed?](https://www.g2.com/discussions/what-is-the-best-desktop-image-optimization-software-for-designers-who-need-to-reduce-file-size-before-delivery-without-the-output-looking-noticeably-compressed)[What is the most affordable WhatsApp marketing software for SMBs?](https://www.g2.com/discussions/what-is-the-most-affordable-whatsapp-marketing-software-for-smbs) [Show MoreShow Less](javascript:void(0);)