Faction
Security Assessment Reporting and Collaboration Framework
Start new thread
Josh Summitt

Faction 1.7 Released - Major Updates for Enterprise Security Teams

by•
For enterprise penetration testing teams and security consulting firms managing multiple assessments, staying organized is essential. OWASP Faction 1.7 includes new management and reporting features designed to help teams handle complexity at scale!

Add a comment

Replies

Best
Josh Summitt
Maker
📌
OWASP Faction just released v1.7 with enterprise-scale features for pentesting teams managing multiple assessments. It's fully open source! Key Features: Manager Dashboard - Bird's-eye view of your entire assessment program with custom status tracking, search/filtering, and metrics visualization. Great for quarterly reviews and capacity planning. Cleaner UI - Redesigned assessment interface with collapsed metadata by default, giving you more screen real estate for actual work. Enhanced Report Editor: Better WYSIWYG rendering Automatic image borders for consistency Extended Markdown (underline with ++, center with >) Dynamic figure numbering with ${Figure#.1} variable - no more manual renumbering when you reorder findings Status Workflows - Automatic status transitions (Scheduled → In Progress → Completed) with support for custom statuses like "On Hold" or "Awaiting Client Access" CVE Integration - Enter a CVE ID and auto-generate report-ready descriptions, references, and severity ratings (CVSS 3.1/4.0). No more copy-pasting from NVD. Expanded REST API - Programmatic vulnerability management, assessment orchestration, and integrations with Jira, ServiceNow, scanners, etc. Perfect for consulting firms or enterprise AppSec teams dealing with dozens/hundreds of assessments simultaneously.