Blog & Insights
Pentest reporting, attack techniques and the day-to-day work of security teams.
How to Scope a Pentest Without the Email Chaos
Pentest scoping over email spreads the details across inboxes, and some only turn up mid-test. A scoping questionnaire collects them in one place.
Ilija Leko2 min read
Proposals Are Now in PentestPad
You can now write and price pentest proposals directly in PentestPad - line items, live document preview, PDF and DOCX export. Here's how it works and why we built it.
Luka Šikić3 min read
PlexTrac Acquired by Brinqa: What It Means
PlexTrac was acquired by Brinqa on August 19, 2026. What the PlexTrac acquisition changes for consultancies, the questions to ask before renewal, and how to export your data.
Luka Šikić12 min read
Introducing Subprojects for Complex Pentests
Discover how PentestPad's new subprojects feature transforms how security teams organize and manage large-scale, multi-faceted penetration testing engagements.
Luka Šikić3 min read
PentestPad and Scaleway: EU Data Sovereignty
We're excited to announce our partnership with Scaleway as part of their Founders Startup Program, reinforcing our commitment to EU data sovereignty and compliance for penetration testing operations.
Luka Šikić2 min read
How AI Is Changing Penetration Testing in 2026
Artificial intelligence has been about to transform cybersecurity for several years running. Explore what AI is actually good at in pentesting.
Luka Šikić7 min read
Vulnerability Assessment vs Penetration Testing
Vulnerability assessment vs penetration testing: what each actually does, where they overlap, when to use which, and why mature security programs always run both.
Luka Šikić9 min read
Best Pentest Reporting Tools in 2026, Compared
Honest 2026 comparison of the best pentest reporting tools — PentestPad, PlexTrac, PenReport, Cyver Core, GhostWriter, Pwndoc, Dradis and more.
Luka Šikić11 min read
Evil AI: Hijacking AI Agent Tool Execution
We watched an AI agent hack itself during a pen test. Here's why trusting API responses without verification is dangerous—and how one malicious server turned 'ls -la' into a reverse shell.
Luka Šikić7 min read
Audit-Ready Cybersecurity: The Tools You Need to Prove It
Certain tools can prove that the job was done correctly, consistently, and transparently. They are actually able to make your audit preparations easier, and your company automatically compliant to certain requirements.
Mirna Novak2 min read
How Often Should You Perform a Pentest?
Knowing when to test is as important as what to test. Here’s a breakdown of industry-standard set expectations and norms and why each matters.
Mirna Novak3 min read
Penetration Test Report Template + Free Download
Learn what makes a professional pentest report and download a free template. Plus, how to automate reporting with PentestPad.
Luka Šikić1 min readLet's get you started
Create your account with PentestPad now, a tool developed by pentesters for pentesters.
