faction: Pen Test Report Generation and Assessment Collaboration
FACTION PenTesting Report Generation and Collaboration Framework
FACTION is your entire assessment workflow in a box. With FACTION you can:
- Automate pen testing and security assessment Reports
- Peer review and track changes for reports
- Create customized DOCX templates for different assessment types and retests
- Real-time collaboration with assessors via the web app and Burp Suite Extensions
- Customizable vulnerability templates with over 75 prepopulated
- Easily manage assessment teams and track progress across your organization
- Track vulnerability remediation efforts with custom SLA warnings and alerts
- Full Rest API to integrate with other tools
Other Features:
- LDAP Integration
- OAUTH2.0 Integration
- SMTP integration
- Extendable with Custom Plugins similar to Burp Extender.
- Custom Report Variables
Faction 1.2 introduces the App Store! The Faction App Store will make it easier for developers to extend faction. Faction Extensions can be used to trigger custom code when certain events happen in your workflow like sending all vulnerbilities to Jira when the assessment is complete or update a tracking system when retests pass or fail. More information can be found in the documentation site.