01 / FINDOPEN SOURCE
KITTYSPLOIT FRAMEWORK
OPEN SOURCE OFFENSIVE SECURITY ECOSYSTEM
Pentest openly.
Report in one click.
Run engagements in the open-source framework. Push findings and evidence as you test, then ship a client-ready report.
→
API · ONE CLICK
Push findings
and evidence.
03 / DELIVERE2EE
KITTYSPLOIT REPORTS
Deliver the report.
- 625 GitHub stars
- 99 Public forks
-
MIT Framework license
-
+8400 Modules in a Framework
- 8 Extensions
Who it is for
Built for people
who ship findings.
If reporting still eats the last days of an engagement, KittySploit is the split you want: open tools for the technical work, optional KittySploit Reports for the deliverable.
Independent pentesters
Own your tooling, keep data local, and stop rebuilding the same Word template after every assessment.
Boutique security firms
Give consultants a shared review workspace and consistent PDFs without forcing a closed platform for testing.
Red teams & labs
Compose modules from the Marketplace, automate the push, and reserve paid seats only for delivery roles.
Why now
Clients expect polished reports. Tooling still ends in copy-paste.
- Same-day deliveryPush evidence once, then edit narrative and export — no retyping findings into a deck.
- Open where trust mattersExecution stays MIT-licensed and self-hosted. You only pay when publishing saves hours.
- Team review without chaosComments, approval states and live preview keep the final document consistent before it leaves.
Community marketplace
Built together.
Growing by design.
Discover focused capabilities, install them into your own framework, or publish the tool you wish already existed.
Explore the Marketplace →KittySploit Reports
Client-ready reports.
Nothing to decode.
Push Framework data through the API, then shape impact, remediation and review into a clear client deliverable. Not a scanner. Not an infrastructure console.
End-to-end encrypted. Findings, evidence and comments are encrypted in the browser before they reach KittySploit.
KITTYSPLOIT REPORTS / LIVE PRODUCT
Push in one click
Send findings and evidence from KittySploit, or import from another tool.
Shape the narrative
Turn technical detail into impact, priority and useful remediation.
Review together
Comment, approve and keep the report consistent before delivery.
Generate the report
Export with your content and visual identity — PDF, HTML, Markdown, DOCX, LaTeX or JSON.
Pricing & downloads
OPEN SOURCE01
KittySploit Framework
For security research, validation and extensibility.
FreeMIT licensed
- Complete framework
- Modules and extensions
- Local and self-hosted
- Community support
REPORTS · SAAS02
Reports SaaS
Hosted workspace for teams delivering client reports.
€39.99/ editor / month incl. VAT
Only editors are paid. Unlimited viewers are free.
- End-to-end encryption
- Finding and evidence editor
- Collaborative review
- Export PDF, HTML, MD, DOCX, TeX, JSON
REPORTS · DESKTOP03
Reports Local
Desktop app. Reports stay on the machine you control.
€29.99/ license / month incl. VAT
One license activates one desktop.
- Same editor and export formats
- Works offline on this device
- Connects to your report server
- License key from your Reports account
Windows REPORTS · SELF-HOSTED04
Reports Server
Centralize reports and users on infrastructure you control.
Freeself-hosted
The server itself is free.
- Shared team workspace
- Windows and Linux
- HTTPS connection from the local app
- No server license fee
Before you choose
Clear answers.
No hidden dependency.
The Framework, Server, Marketplace and Reports work together, but each has a distinct role.
Can I use the Framework without Reports?+
Yes. The Framework is MIT-licensed, free and self-hosted. KittySploit Reports is an optional publishing layer.
How does the one-click transfer work?+
As you test, push engagement findings and evidence through the API instead of entering them again when delivery starts.
Can Reports receive data from other tools?+
Yes. KittySploit Reports can also import findings outside KittySploit, so the reporting workflow is not tied to one scanner.
Is Reports Server free?+
Yes. Download and self-host Reports Server on Windows or Linux at no cost. Editing still uses a Reports Local license. Your infrastructure stays yours.
What can I customize in the PDF?+
Shape the content, remediation and client-facing narrative, then export the report with your visual identity.
Which export formats are supported?+
Reports SaaS and Reports Local export to PDF, HTML, Markdown (.md), Word (.docx), LaTeX (.tex) and JSON.
What does Reports SaaS cost?+
€39.99 per editor / month incl. VAT. Viewer seats are free. Includes the hosted workspace, end-to-end encryption, the finding and evidence editor, collaborative review and export to PDF, HTML, Markdown, DOCX, LaTeX and JSON.
What does Reports Local cost?+
€29.99 per license / month incl. VAT. One license activates one desktop. The app keeps reports on the machine and can connect to a self-hosted Reports Server.
Are viewer seats free?+
Yes, on Reports SaaS. You only pay for editors — people who create and shape report content. Viewers can review deliverables at no extra cost. Reports Local is licensed per desktop, not per viewer.
Is Reports end-to-end encrypted?+
Yes. Findings, evidence, comments and report narrative are encrypted in the browser before they reach KittySploit. The service stores ciphertext — not your plaintext content.
Do I need Reports to use the Marketplace?+
No. Marketplace extensions install into your own Framework environment and remain independent from KittySploit Reports.
TWO PATHS SAME ECOSYSTEM
Try Reports free.
Keep the framework open.
See how findings become a client-ready report. The Framework remains free, self-hosted and independent.