Faction Security Information

Pentesters should spend their time finding vulnerabilities, not formatting Word documents. FACTION is the pentest reporting and management platform built by pentesters, for pentesters. It brings the whole assessment lifecycle into one place: scheduling engagements, documenting findings as you test, peer review, client-ready DOCX and PDF reports, retesting, and remediation tracking. What teams do with FACTION: Generate reports from their own Word templates, with findings, screenshots and severity tables filled in automatically Draft descriptions, recommendations and executive summaries with AI, using their own prompts and their own model provider (OpenAI, Anthropic, Azure OpenAI, OpenRouter or self-hosted) Start from 75+ customizable vulnerability templates instead of rewriting the same finding again Collaborate in real time and push findings straight from Burp Suite Track every finding from report to retest to closure with custom SLAs, alerts and dashboards Connect to the rest of their stack through a REST API, extensions for tools like Jira, and SSO via SAML, OIDC and LDAP FACTION is an OWASP project, open source under Apache-2.0, with no cap on users. Self-host it with a single Docker command, or let us host it for you. Built for pentest consultancies, internal application security teams and MSSPs. GitHub: github.com/factionsecurity/faction