-
Huntflow
Local-first pentest workflow app — track engagements, targets, test sessions, evidence, report drafts, and findings. Offline-first, zero telemetry.
Hi HN — I built HuntFlow to replace the mix of spreadsheets, Markdown notes, timers, screenshots, and report documents that tend to fragment a pentest.
HuntFlow is an MIT-licensed, local-first PWA for tracking targets, focused test sessions, Markdown notes, recon assets, evidence, findings, reports, and analytics. The core runs offline, stores data locally in IndexedDB, sends zero telemetry, and requires no account. You can run it with `npx huntflow@latest`; an optional $6/month plan adds end-to-end encrypted sync and backups across devices.
Source: https://github.com/xalgord/Huntflow
I would appreciate feedback from pentesters and bug bounty hunters, especially on what is still missing from the workflow or data model.
-
Kargo
Stop Scripting Promotions. Start Shipping with Kargo. Kargo automates promotion across dev, staging, and prod with approval gates and verification. Open source, built by the team behind Argo CD. Download now.