sysreptor
Offensive & PentestingA customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.
Features
- Design reports in HTML
- Write reports in Markdown
- Render to PDF output
Recent releases
View all 24 releases →
2026.29
Breaking risk
Breaking changes
- Migrate Entra ID and Google SSO settings to `OIDC_AUTHLIB_OAUTH_CLIENTS` setting.
Security fixes
- Implement multiple hardening measures and code quality improvements.
Notable features
- Make the user identifier claim configurable in OIDC generic setups.
- Add `require_email_verified` setting to OIDC configuration.
- Enable syntax highlighting for autolinks in Markdown editor.
Full changelog
- Security: implement multiple hardening measures and code quality improvements
- SSO: make the user identifier claim configurable (https://docs.sysreptor.com/users/oidc-generic/)
- SSO: add
require_email_verifiedsetting to OIDC config - SSO: migrate Entra ID and Google SSO settings to
OIDC_AUTHLIB_OAUTH_CLIENTSsetting - Warning about non-members in project user fields
- Markdown editor: syntax highlight autolinks
Click here to go to the update instructions: https://docs.sysreptor.com/setup/updates/
2026.27
Security relevant
Security fixes
- GHSA-pcpr-q2qj-3v43 — Fix personal note sharing permissions
Notable features
- Pixelation tool added to Image editor
- Task list checkbox toggling in MDE markdown preview
- Frontmatter highlighting support in MDE
Full changelog
- Security: Fix personal note sharing permissions (https://github.com/Syslifters/sysreptor/security/advisories/GHSA-pcpr-q2qj-3v43)
- Image editor: add pixelation tool
- MDE: support toggling task list checkboxes in markdown preview
- MDE: support frontmatter highlighting
- MDE: prevent undo/redo while image editor is open
Click here to go to the update instructions: https://docs.sysreptor.com/setup/updates/
2026.25
Bug fix
Notable features
- Show database version in license info page
- Support multi-select and bulk actions in list views
- Support bulk moving in notes tree
Full changelog
- Highlight findings by CVSS if severity field is empty
- Fix web worker hangs when rendering large markdown previews
- Show database version in license info page
- Support multi select and bulk actions in list views
- Support bulk moving in notes tree
- UI: Redesign list view header
- UI: Add today button to date picker
- UI: add autocomplete hints to input fields
- AI agent: add field labels to context
- Add design for HTB COAE certification
Click here to go to the update instructions: https://docs.sysreptor.com/setup/updates/
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
About
Stars
2,477
Forks
270
Languages
Python
Vue
TypeScript
