The Pentest Report Editor.Where Findings Become Reports.

Rich text findings, a reusable vulnerability library, CVSS scoring and five export formats from one Export menu.

14-day free trialSelf-hosting includedCancel anytime
The Vulnotes report editor with a finding open in rich text
5
export formats
3.1 & 4.0
CVSS scoring
9
finding field types
Auto
save as you write

A Vulnerability Library You Actually Reuse

Add findings from the multilingual vulnerability library or start blank. Content is copied into the report, so report edits never pollute the knowledge base, and fields follow your vulnerability template.

  • 9 field types: Text, Rich Text, Dropdown, Tags, CVSS, Custom Score, Number, Checkbox, Date
  • Fields follow the vulnerability template you define
  • Mix Web and Infra structures in one report

Score with CVSS. Or Your Own System.

Interactive CVSS v3.1 and v4.0 calculators are built in, with optional temporal and environmental metric groups. If CVSS does not fit the engagement, define a custom scoring system instead.

  • Interactive CVSS v3.1 calculator with optional temporal and environmental groups
  • CVSS v4.0 supported alongside v3.1
  • Severity colors propagate into tables, charts and LiquidJS filters automatically
Cover page of an exported Vulnotes Android pentest report

Export Pentest Reports to Word, PDF and More

Native Word export runs through a custom HTML-to-OOXML pipeline: headers and footers, mixed portrait and landscape sections, merged table cells with per-cell styling, syntax-highlighted code blocks and full-bleed cover pages all survive. Your client edits the deliverable in Word and it still matches the design from your report template.

All five export formats are included in every plan. See pricing.

  • Chromium-rendered PDF: what you see in the live preview is exactly what ships
  • XLSX with one row per finding, plus full-fidelity JSON
  • One-click AES-256 password-encrypted ZIP bundles the report PDF with all evidence attachments
72
languages in the picker
one report dataset
English deliverableFrench deliverable

One Engagement, Every Language

Reports, findings and the vulnerability library work in 72 languages, and linked template translations keep every variant in step. The AI assistant translates library entries when you need a head start.

  • 72 languages across reports, findings and the library
  • Linked template translations stay in sync
  • Deliver the same engagement in French and English from one dataset

More From the Report Editor

Live multi-page preview

WYSIWYG preview with single and two-page modes: what you see is what ships.

Evidence travels with the finding

Attachments stay on the finding and ship inside the encrypted ZIP deliverable.

Notes workspace beside the report

Keep engagement notes next to the report while you write.

Report JSON import and export

Move whole reports between instances with full fidelity.

Frequently Asked Questions

Yes. Content pasted from Word or a terminal is sanitized automatically: the structure you want is kept and the formatting noise is stripped. Try the editor in the interactive tour.

Yes. Vulnotes ships interactive CVSS v3.1 and v4.0 calculators, and you can define a custom scoring system when CVSS does not fit the engagement. Severity colors propagate into tables, charts and LiquidJS filters automatically. See scoring.

Yes. DOCX export is native Word output from a custom HTML-to-OOXML pipeline that preserves headers and footers, mixed portrait and landscape sections, merged table cells with per-cell styling and syntax-highlighted code blocks. Clients can edit the deliverable in Word and it still matches your design. See exports.

Evidence attachments travel with the finding and ship inside the one-click AES-256 password-encrypted ZIP together with the report PDF. On a self-hosted instance, nothing has to leave your network. Learn about self-hosting.
Start today

Ready to Write
Better Reports?

Set up in minutes. Write, review and deliver your next pentest report in Vulnotes.

14-day free trialSelf-hosting includedCancel anytime
Vulnotes report editor preview