KittySploit
Try Reports free Sign in

OPEN SOURCE OFFENSIVE SECURITY ECOSYSTEM

Pentest openly.
Report in one click.

Run engagements in the open-source framework. Push findings and evidence as you test, then ship a client-ready report.

Try Reports free View the framework on GitHub
01 / FINDOPEN SOURCE

KITTYSPLOIT FRAMEWORK

Do the security work.

→ API · ONE CLICK

Push findings
and evidence.

03 / DELIVERE2EE

KITTYSPLOIT REPORTS

Deliver the report.

Scroll

Who it is for

Built for people
who ship findings.

If reporting still eats the last days of an engagement, KittySploit is the split you want: open tools for the technical work, optional KittySploit Reports for the deliverable.

01

Independent pentesters

Own your tooling, keep data local, and stop rebuilding the same Word template after every assessment.

02

Boutique security firms

Give consultants a shared review workspace and consistent PDFs without forcing a closed platform for testing.

03

Red teams & labs

Compose modules from the Marketplace, automate the push, and reserve paid seats only for delivery roles.

Why now

Clients expect polished reports. Tooling still ends in copy-paste.

  • Same-day deliveryPush evidence once, then edit narrative and export — no retyping findings into a deck.
  • Open where trust mattersExecution stays MIT-licensed and self-hosted. You only pay when publishing saves hours.
  • Team review without chaosComments, approval states and live preview keep the final document consistent before it leaves.

Community marketplace

Built together.
Growing by design.

Discover focused capabilities, install them into your own framework, or publish the tool you wish already existed.

Explore the Marketplace →
01
Browse extensionsFirst-party tools and community packages
→ 02
Build an extensionPackage and publish your capability
↗ 03
Search the catalogFind modules, CVEs and packages
↗

KittySploit Reports

Client-ready reports.
Nothing to decode.

Push Framework data through the API, then shape impact, remediation and review into a clear client deliverable. Not a scanner. Not an infrastructure console.

End-to-end encrypted. Findings, evidence and comments are encrypted in the browser before they reach KittySploit.

Reports demo ↗ Start with Reports →
KittySploit Reports editor with finding content, review status and live PDF preview KITTYSPLOIT REPORTS / LIVE PRODUCT
01
API

Push in one click

Send findings and evidence from KittySploit, or import from another tool.

02
Aa

Shape the narrative

Turn technical detail into impact, priority and useful remediation.

03
✓

Review together

Comment, approve and keep the report consistent before delivery.

04
PDF

Generate the report

Export with your content and visual identity — PDF, HTML, Markdown, DOCX, LaTeX or JSON.

Proof

Open adoption.
Concrete deliverables.

FrameworkReports
Security modules & execution✓—
Local and self-hosted operation✓—
One-click API transferPushReceive
Finding editor & reviewBasic✓
End-to-end encryption—✓
Export PDF, HTML, MD, DOCX, TeX, JSON—✓

Simple pricing

The tools are open.
You pay for Reports.

Start with the complete framework. Add KittySploit Reports only when professional publishing saves your team time.

OPEN SOURCE01

KittySploit Framework

For security research, validation and extensibility.

FreeMIT licensed
  • Complete framework
  • Modules and extensions
  • Local and self-hosted
  • Community support
Get the framework ↗
REPORTS02

KittySploit Reports

For practitioners and teams delivering client reports.

€39.99/ editor / month incl. VAT

Only editors are paid. Unlimited viewers are free.

  • End-to-end encryption
  • Finding and evidence editor
  • Collaborative review
  • Export PDF, HTML, MD, DOCX, TeX, JSON
Try Reports free ↗Create your workspace →

Before you choose

Clear answers.
No hidden dependency.

The framework, Marketplace and Reports work together, but each has a distinct role.

Can I use the Framework without Reports?+

Yes. The Framework is MIT-licensed, free and self-hosted. KittySploit Reports is an optional publishing layer.

How does the one-click transfer work?+

As you test, push engagement findings and evidence through the API instead of entering them again when delivery starts.

Can Reports receive data from other tools?+

Yes. KittySploit Reports can also import findings outside KittySploit, so the reporting workflow is not tied to one scanner.

What can I customize in the PDF?+

Shape the content, remediation and client-facing narrative, then export the report with your visual identity.

Which export formats are supported?+

KittySploit Reports exports to PDF, HTML, Markdown (.md), Word (.docx), LaTeX (.tex) and JSON.

What is included in KittySploit Reports?+

€39.99 per editor / month incl. VAT. Viewer seats are free. Includes end-to-end encryption, the finding and evidence editor, collaborative review and export to PDF, HTML, Markdown, DOCX, LaTeX and JSON.

Are viewer seats free?+

Yes. You only pay for editors — people who create and shape report content. Viewers can review deliverables at no extra cost.

Is Reports end-to-end encrypted?+

Yes. Findings, evidence, comments and report narrative are encrypted in the browser before they reach KittySploit. The service stores ciphertext — not your plaintext content.

Do I need Reports to use the Marketplace?+

No. Marketplace extensions install into your own Framework environment and remain independent from KittySploit Reports.

TWO PATHS SAME ECOSYSTEM

Try Reports free.
Keep the framework open.

See how findings become a client-ready report. The Framework remains free, self-hosted and independent.

Try Reports free ↗View the framework on GitHub ↗