Skip to content
FACTION

FACTION Security Blog

Pentest reporting, automated.

Product updates, pentest reporting guides, and security engineering notes from the team behind FACTION, the open-source and enterprise pentest management platform.

3 min read Pinned

See You at SecTor Arsenal 2026 in Toronto

We're heading back to Black Hat SecTor Arsenal on October 8th to demo OWASP Faction 2.0 live. Come say hi, grab some stickers, and tell us what would make your reporting workflow better.

Josh Summitt
  • News
  • SecTor
  • Blackhat
6 min read

Releasing Faction 2.0 at BlackHat Arsenal 2026

I’m excited to announce that I’ll be returning to Black Hat Arsenal 2026 in Las Vegas and SecTor 2026 in Canada to demo OWASP Faction 2.0 — the biggest…

Josh Summitt
  • Cybersecurity
  • Red Team
  • Pentesting
2 min read

Vibe Coding Faction Extensions at PhreakNic 26

I just got back from speaking at PhreakNic 26 where I vibe coded a GitHub Faction Extension live while also speaking about my many misadventures in vibe…

Josh Summitt
  • AI/LLM
  • Vibe Coding
  • AppSec
4 min read

Black Hat 2025 Arsenal Experience

I know this post is kind of late, but I’m just now getting around to posting about my Black Hat USA 2025 and SECTOR 2025 Arsenal experiences. For context,…

Josh Summitt
  • Hacking Tools
  • AppSec
  • Pentesting Tools
3 min read

Automate PenTest Reports with Boilerplates

If you have been doing penetration testing for any length of time, you probably have a personal database of vulnerability descriptions, recommendations, and…

Josh Summitt
  • Vulnerability Management
  • Penetration Testing
  • Red Team
6 min read

How to Automate Pentest Reporting Using Faction

Faction is an open-source security assessment collaboration framework designed to streamline and enhance your security workflows. With Faction, you can:

Josh Summitt
  • Pentesting
  • Vulnerability Assessment
  • Vulnerability Management