English
Français
Deutsch
Italiano
РусскийVulnerability database
- Reuse write-ups across audits.
- Custom fields on findings.
- The catalogue is the point of PwnDoc.
PwnDoc alternative
PwnDoc alternative with zero-access encryption
HoneyDoc is a PwnDoc alternative that keeps the vuln DB, collab, and self-hosting — and adds Gantt, runbooks, a client portal, and a host that cannot read the findings.
What PwnDoc already gets right
We are not going to pretend it is empty. That is why boutiques start there.
Collab, QA, retests
- Real-time multi-user reporting.
- Threaded comments and a review flow.
- Retest status on findings.
DOCX you actually own
- Custom Word templates.
- CVSS 3.1 and 4.0.
- An API.
- Self-host it tonight if you want.
Shape the forms
- Custom sections and fields.
- The tool bends to the boutique, not a vendor schema.
What you still do not get in PwnDoc
The report is written. The engagement around it is still a pile of side tools.
Zero-access encryption
- Findings are encrypted in the browser.
- The host is assumed breached.
- PwnDoc stores what the server can read.
Gantt, people, TODOs
- Assign pentesters and custom TODOs.
- See who is free.
- PwnDoc does not run the boutique calendar.
Runbooks
- Variables, copy-ready commands, check off what is done, justify when it is not covered.
- Next to the engagement, not in a wiki.
Client portal
- Clients download deliverables, send files, review findings.
- No mailbox of DOCX.
PPTX and more
- Attestations and executive decks, not only the Word report.
- Same templates pipeline.
Files and need-to-know
- Engagement files, evidence, logs.
- Pentesters see what they must, not the whole book.
Switch when these start to hurt
- Client findings sit in plaintext on a server you do not fully control.
- You need Gantt and free-resource assignment, not another spreadsheet next to PwnDoc.
- The client wants a portal, not another attachment.
- Runbooks live in Notion and rot.
The actual reason
- Zero-knowledge authentication: the password never reaches the server.
- Zero-access encryption: a leaked database is noise.
- That is HoneyCore.
- PwnDoc does not do this.