Side by side
Ghostwriter vs Pentographer
Both stand on penetration testing software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free plan APISelf-hostedWeb
Choose Ghostwriter if your red team or consultancy needs assessment management, evidence capture, and configurable reporting in one collaborative platform. Look elsewhere if you need built-in reporting statistics beyond its current historical-data reporting capabilities.
Visit Ghostwriter Free plan APILinuxSelf-hosted+1
Pentographer covers assessment tracking through report creation, with cloud and self-hosted deployment options. Teams considering AI drafting should account for the separate Anthropic API key requirement.
Visit PentographerThe facts
| Ghostwriter | Pentographer | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | Not published |
| Runs on | API, Self-hosted, Web | API, Linux, Self-hosted, Web |
| Lowest paid plan | Free or on request | Free or on request |
| Plans published | 1 | 2 |
| Maker | Not published | Not published |
| Website | github.com | pentographer.com |
| On penetration testing software | #8 of 34 | #12 of 34 |
Ghostwriter: what it does well
- Manages clients, projects, assets, findings, and evidence.
- Creates Word reports with Jinja2 templates and XLSX, PPTX, and JSON outputs.
- Includes role-based controls, single sign-on, and multi-factor authentication.
- GraphQL API supports custom workflows and external tool connections.
- Can automatically log Mythic C2 and Cobalt Strike activity.
What to know first
- Deployment requires installing and setting up a Django web app.
- More built-in reporting statistics are planned.
Pentographer: what it does well
- Free cloud and self-hosted plans.
- Includes OWASP Top 10 (2021) playbook.
- Exports branded reports to Word and PDF.
- Supports team roles, including read-only viewers.
- Self-hosting is MIT-licensed.
What to know first
- AI assistance requires your own Anthropic API key.
- Self-hosting requires Node.js 20+ and PostgreSQL.
- Desktop apps are listed as coming soon.
Alternatives to Ghostwriter Alternatives to Pentographer The whole list