Faraday

An open-source platform giving security teams one shared workspace for penetration testing and vulnerability management. Plugins and importers read the output of the scanners a team already runs, normalise it into a common model, remove duplicates and let results be filtered, tagged and prioritised, with a command line client and REST API for loading findings from CI.

Pentesters, security engineers and compliance officers use it to track what was found, share that view with whoever must fix it, and export reports.

Hosted on your own infrastructure, your inventory of weaknesses stays invisible to third parties, the data is yours to back up, and no per-user licence is needed to add analysts.