Vulnotes is unclaimed —

Vulnotes

Write Better Pentest Reports·vulnotes.com

Vulnotes is an AI-powered pentest reporting and vulnerability management platform built for security teams. It provides a real-time collaborative report editor, a visual drag-and-drop template builder, CVSS 3.1/4.0 scoring, and exports to PDF, DOCX, XLSX, JSON and encrypted ZIP. It can run as multi-tenant cloud SaaS, self-hosted on a customer's own infrastructure, or in fully air-gapped editions for highly sensitive environments.

What it's for

writing and delivering pentest reportsvulnerability and finding management with CVSS scoringreal-time collaborative report editing and review workflowswhite-label client remediation trackingscheduling and planning pentest engagementsautomating report generation via API and MCP

Features 20

AI data anonymization before sending content to external providers
AI-assisted finding writing and screenshot-to-finding extraction
Air-Gap Server and Air-Gap Workstation editions for offline use
Calendar-based engagement planning and team availability tracking
CVSS 3.1 and 4.0 scoring
Drag-and-drop visual template builder with LiquidJS variables
Five export formats: PDF, DOCX, XLSX, JSON, encrypted ZIP
Multi-language report translation
One-command self-hosted Docker installation
Outbound webhooks to Discord, Slack, Microsoft Teams and Element/Matrix
Python SDK for automation
Real-time collaborative report editor with live cursors and presence indicators
REST API (160+ endpoints) and MCP server (40+ tools)
Reusable vulnerability library
Review and approval workflow with snapshots and threaded comments
Role-based access control with custom roles and data scoping
Single sign-on across six provider types (Google, Microsoft Azure AD, Okta, SAML 2.0, LDAP/LDAPS, generic OAuth2)
Two-factor authentication with org-wide enforcement
White-label client portal for remediation tracking
Whole-instance JSON export for data portability

At a glance

free trialself-hostableAPI

TypeWeb app

DeploymentHybrid

PlatformsWeb

Foroffensive security teams (internal red teams, blue/purple teams), independent penetration testers and freelance consultants, MSSPs and cybersecurity consultancies, security audit firms, internal security audit teams

CompanyVulnotes SASU

Integrations

DiscordSlackMicrosoft TeamsElement/MatrixJiraGoogleMicrosoft Azure ADOktaLDAPOpenAIAnthropicGoogle GeminiMistralOllamaClaude

Complianceself-reported

GDPR

Resources

Pricing

Single plan priced at €48 per user/month, billed monthly or annually (annual billing totals €576/user/year). Self-hosting is included at no extra cost. Teams of 1-20 users use self-serve checkout; from 21 users pricing is arranged directly with sales, including priority support and onboarding. Air-gapped editions (Server and Workstation) are priced per deal through sales. A one-time Custom Report Design Service costs 400 EUR per template.

Vulnotes€48/user/mo

Billed monthly or annually at the same €48/user/month rate; annual billing totals €576/year per user.

Self-serve checkout for teams of 1 to 20 users; 20+ users priced by contacting sales; no per-report limits.