Freedom251 › Penetration Testing Software
AttackForge
What AttackForge is
AttackForge manages offensive security testing from planning and execution through reporting, remediation, and retesting. ReportGen creates branded reports from customizable templates and supports command-line generation. Findings can be imported from Burp Suite, Nessus, Qualys, Rapid7, Nmap, or custom CSV and JSON files. Flows respond to events, schedules, or external HTTP triggers and can automate systems with HTTP interfaces. The Self-Service REST API has more than 150 OpenAPI v3-documented endpoints. Named integrations include Jira, ServiceNow, Azure DevOps, Slack, Microsoft Teams, Power BI, Tableau, HackerOne, and BugCrowd. AI assistants can connect through MCP with per-user permissions and administrator session visibility and revocation. Pro costs $50 a month, Team 150.00 USD, Consultancy 300.00 USD, and SME 800.00 USD. Every plan includes a fully featured free trial without a credit card. Enterprise pricing is unlisted and supports SaaS or self-hosted deployment.
Who it suits
It suits individual practitioners, pentest teams, consultancies, and growing enterprises managing security-testing projects. Organizations needing imports, reporting, workflow automation, APIs, or self-hosting can choose among its plans.
What it does well
- Branded customizable and command-line reports
- Imports findings from major security tools
- Event, schedule, and HTTP-triggered workflows
- REST API with 150+ endpoints
- Free trial requires no credit card
What to know first
- No free plan
- Team, Consultancy, and SME limit new projects
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Team | $150/month · 5 security testers · unlimited clients · 5 new projects/month · 5 access-control groups | $150 a month |
| Consultancy | $300/month · 10 security testers · unlimited clients · 10 new projects/month · 10 access-control groups | $300 a month |
| Pro | $50/month · 1 security tester · unlimited clients · unlimited projects/month · 3 access-control groups | $50 a month |
| SME | $800/month · 20 security testers · unlimited clients · 20 new projects/month · 20 groups and custom domain · Assets Module, Self-Service API, Flows and AI MCP included | $800 a month |
| Enterprise | Discuss your Enterprise plan · Unlimited users · dedicated infrastructure or self-hosted · all add-ons included · SLA-backed support | On request |
As attackforge.app lists them, read 5 Oct 2026. The maker's own page has the final word.
Verdict
AttackForge combines finding management, reporting, automation, integrations, and API access for offensive-security work. Paid plans scale tester and project allowances, with Enterprise adding dedicated or self-hosted options.
Facts from AttackForge's own pages
- AI access
- AttackForge supports MCP connections for AI assistants, with per-user tool permissions and administrator session visibility and revocation. · attackforge.app, 5 Oct 2026
- API
- The Self-Service REST API has more than 150 endpoints and is documented using OpenAPI v3. · attackforge.app, 5 Oct 2026
- Audience
- The pricing page positions Pro for individual practitioners, Team for small pentest teams, Consultancy for medium-sized teams and SME for larger consultancies and growing enterprises. · attackforge.app, 5 Oct 2026
- Hosting and data location
- Enterprise customers can choose an Azure data-center region, and the page lists SaaS or self-hosted deployment. · attackforge.app, 5 Oct 2026
- Integrations
- Named integrations include Jira, ServiceNow, Azure DevOps, Slack, Microsoft Teams, Power BI, Tableau, HackerOne and BugCrowd. · attackforge.app, 5 Oct 2026
- Plan limits
- The Team, Consultancy and SME plans limit new projects per month to 5, 10 and 20 respectively. · attackforge.app, 5 Oct 2026
- Purpose
- AttackForge manages offensive security testing from planning and execution through reporting, remediation and retesting. · attackforge.app, 5 Oct 2026
- Reporting
- Its ReportGen engine creates branded reports using customizable templates and supports command-line report generation. · attackforge.app, 5 Oct 2026
- Security
- The pricing page identifies AttackForge as SOC 2 Type II certified and says Enterprise can use dedicated infrastructure or self-hosted deployment. · attackforge.app, 5 Oct 2026
- Support
- Enterprise includes SLA-backed support, a dedicated Customer Success Manager, training workshops and onboarding. · attackforge.app, 5 Oct 2026
- Trial
- The pricing page says every plan includes a fully featured free trial with no credit card required. · attackforge.app, 5 Oct 2026
- Vulnerability imports
- The platform imports findings from tools including Burp Suite, Nessus, Qualys, Rapid7 and Nmap, as well as custom CSV and JSON. · attackforge.app, 5 Oct 2026
- Workflows
- Flows supports event, scheduled and external HTTP triggers, and can automate integrations with systems that expose an HTTP interface. · attackforge.app, 5 Oct 2026
Where AttackForge stands on Freedom251
- Penetration Testing Software#18 of 34