Passphrase never leaves the browserWeb Crypto derives a key locally. KittySploit only stores ciphertext and wrapped keys.
MONDAY, 21 JULY
Good morning, Alex.
Three findings need your attention before the next delivery.Open a shared report to review findings and leave comments.AC
CONTINUE WHERE YOU LEFT OFF
SHARED WITH YOU
Acme Cloud Security Review
12 findings · Last edited 18 minutes agoDelivery quality76%
3 findings need reviewASMK
Active reports
4+1 this monthFindings ready
28Across 3 clientsAwaiting review
73 assigned to youRecent reports
Your shared reports
Pick up work or check delivery status.
Reports you can open and comment on.
REPORTSTATUSDELIVERY QUALITYUPDATED
REPORTS
GUEST ACCESS
All reports
Shared with you
Manage assessments from draft to delivery. Open shared reports, review findings, and leave comments. Upgrade to Pro to edit.ReportStatusAccessFindingsDelivery qualityUpdated
REUSABLE KNOWLEDGE
Finding library
Start from proven content, then adapt it to the client and evidence.6 findingsSorted by most used
⌕
No matching findings
Try a broader term or clear the active filters.
REPORT STRUCTURES
Templates
Standardize the deliverable without slowing down the pentester.DEFAULT TEMPLATE
Professional Pentest Report
A complete structure for consultancy work: executive narrative, scope, methodology, technical findings and a remediation roadmap.
✓Ready for client deliveryIncludes every required report section
ACME INDUSTRIES
Application
Security Review
8 report sections4 finding fields3 export formats
Available templates
Choose a structure that matches the engagement.
K01
PENTEST
Professional Pentest
Executive and technical reporting for web, API, cloud or infrastructure engagements.
K01
OWASP
OWASP Assessment
Findings organized around OWASP categories with coverage and methodology mapping.
K01
EXECUTIVE
Executive Brief
A concise decision-maker report focused on risk, priorities and the remediation roadmap.
CLIENTS
All clients
Keep branding, contacts and recurring scope context ready for every report.ClientStatusActiveDeliveredContactUpdated
⌕
No matching clients
Try another search term or clear the active filters.
ORGANIZATION
Settings
Configure the workspace once and keep every delivery consistent.Organization profile
Used in document metadata and report footers.
Report identity
These colors apply to generated documents only — not the workspace interface.
K
Organization logoSVG or PNG · Transparent background recommended
ORGANIZATION PROFILE
Your reports,
consistently branded.
Two-factor authentication
Add an authenticator app step when signing in to this workspace.
Encrypted workspace
Project content stays end-to-end encrypted. Recovery only adds another client-held recipient for project keys.
PERSONAL VAULT
Checking vault…
Your private identity remains protected by your personal passphrase.
ORGANIZATION RECOVERY
CHECKING
Checking recovery coverage…
The private recovery key is never stored by KittySploit.
—protected projects covered
- Fingerprint
- —
- Created
- —
- Last tested
- Never
Only a workspace owner can configure or rotate the organization recovery kit.
✓ Server never receives a private key
✓ Existing owners can re-share access
✓ Rotation revokes the previous kit
API Key
One workspace key for KittySploit — pick the project when you push from the framework.
Create workspace API key
Personal · all your projects · pick target in KittySploit
Push from KittySploit
Save the key, list projects, then push to the one you pick.
Create a workspace key first, then run these commands in KittySploit.
Workspace users
Browse accounts, invite viewers or editors, and open someone to grant project access — including encrypted report keys.
E2EE · ACCESS
Demo preview — explore invites and access here. Real invitations are disabled and nothing is emailed.
Language
Choose the language used across the Reports Studio interface.
Default document options
These can still be changed during each export.
Organization signing certificateNo certificate uploaded yet. Use a PKCS#12 (.p12 / .pfx) issued to your firm.
ACCOUNT
Payments, invoices & desktop license
Manage renewal, receipts and the license used to activate the local app.Loading billing details…
◇
COMING NEXT
Finding library
This workspace is part of the next product iteration.IMPORT REVIEW
Review scan results
Deselect findings you do not want. Duplicates already in the report are skipped by default.
Unmapped markdown sections
Some section headings were not recognized. Map them manually or they will be skipped on import.
Findings
Ready to import
AC
Acme Cloud Security ReviewAcme Industries
Findings/KS-104
✓
Evidence is already attached
2 verified items from the KittySploit import will appear in the final report.
Evidence
Keep only what the client needs to understand and reproduce the finding.
Retest historyAppend-only validation records
Technical details
Identifiers, scoring and external references.
Sections/New section
REPORT SECTION
Discussion