Skip to main content

Pentest Workspace, CyberChef & Executive Reporting

Beyond automated scanning, VulnerGuard provides dedicated red-team engagement workspaces, an embedded cryptographic/payload Swiss Army Knife (CyberChef), and compliance-ready PDF/HTML report generation.

1. Pentest Engagement Workspace (/pentestws)​

Navigate to https://vulnerguard.com/pentestws to access the Penetration Testing Workspace.

Capabilities​

  • Target & Host Inventory Management: Organize multi-day red-team engagements by target domain, subnet, discovered ports, and service banners.
  • Embedded Engagement Notes (vg-workbench-pentestws): Provides structured note-taking, credential matrices, and command cheat sheets per host.
  • Direct Tool Dispatch: Launch targeted follow-up runs (sqlmap, ffuf, wpscan, testssl) directly against specific endpoints uncovered during initial reconnaissance.

2. Embedded CyberChef Workbench (/cyberchef/)​

During active assessments, operators frequently encounter obfuscated JavaScript bundles, Base64/Hex-encoded JWT tokens, URL-encoded SQL payloads, or compressed Gzip streams.

  • Service Role: vg-workbench-cyberchef
  • Access Route: Served via https://vulnerguard.com/cyberchef/ and embedded inside the VulnerGuard operator console.
  • Zero External Data Leakage: All decoding, AES/RSA decryption, regular expression extraction, and entropy analysis execute 100% locally inside your browser and isolated container—never touching external pastebins or third-party decoders.

3. Executive & Technical Report Generation​

VulnerGuard transforms raw scanner telemetry into structured, board-ready and engineer-ready deliverables.

Exporting Reports​

From any completed scan on the Reports (/reports) or Command Center (/dashboard) view:

  • HTML Interactive Report (GET /api/scan/<scan_id>/report?format=html): Generates a standalone, styled HTML document containing executive metrics, severity charts, AI analysis, and expandable raw tool evidence.
  • PDF Compliance Report (GET /api/scan/<scan_id>/report?format=pdf): Renders a print-ready PDF suitable for client handoff, ISO 27001 / SOC 2 evidence collection, or executive briefings.

Anatomy of a VulnerGuard Report​

  1. Engagement Metadata: Scan ID (scan_<timestamp>_<uuid>), Target URI, Start/Completion Timestamps, and Executing Organization.
  2. Executive AI Risk Brief: Synthesizes technical findings into business impact and attack-chain exploitability.
  3. Severity Distribution Matrix: Breakdown across Critical, High, Medium, Low, and Info findings.
  4. Detailed Findings Register: Every vulnerability record includes:
    • Discovering Engine (nuclei, nmap, subfinder, testssl, ffuf, zap, etc.)
    • Vulnerability Classification & Severity Badge
    • Structured JSON Evidence Payload (matched template ID, request metadata, open port banner, or matched endpoint)
  5. Prioritized Remediation Roadmap: Step-by-step hardening instructions tailored to the target's fingerprinted stack.