PentestPath DocsOfficial documentation for PentestPath 2.2.0.

Local-first pentest workspace with attack graph, terminal, Infrastructure Hub, Evidence, reporting, Arsenal, Team Mode, and licensing references.

Install PentestPath

Start a session

Release downloads

Current product behavior

These docs track the v2.2.0 app: screenshot evidence annotation, configurable Typst PDF export, richer Arsenal commands, demo session, and the updated Free/Pro split.

Workflow-first references

Learn how Workspace, Terminal, Infrastructure Hub, Findings & Evidence, Report, Settings, Team Mode, Vault, and import/export fit together.

Licensing clarity

Free includes one session, integrated terminals, basic Arsenal, Evidence, screenshot annotation, and HTML export. Pro unlocks unlimited sessions, PDF, AI, Team Mode, custom Arsenal, and favorites.

What PentestPath Is

PentestPath is a desktop pentest workspace built with Tauri v2, Rust, and Svelte 5. It keeps the attack graph, terminal context, scan review, Findings, Evidence, and reporting in one local-first session instead of spreading work across disconnected tools.

2.2.0 Highlights

Paste or select screenshots in Evidence, annotate them, and use opaque redaction before saving.
Send Arsenal commands to the terminal for review without auto-running them.
Use richer built-in command modes for tools such as Nmap, Gobuster, FFUF, Nuclei, Hydra, SQLMap, WPScan, and NetExec.
Configure reusable Typst templates for Pro PDF report export.
Load a populated demo session from Settings. On Free, it can replace the current session when the one-session limit is already reached.
Use integrated terminals in both Free and Pro. Terminal count is not a license differentiator in this release.

Start Here

New user: go to Installation
First workflow: read Quick Start
UI map: read Panels Overview
Evidence and reporting: read Findings & Evidence and Report
Collaboration: read Team Mode
Licensing: read Plans