Product updates, pentest reporting guides, and security engineering notes from the team behind FACTION, the open-source and enterprise pentest management platform.https://blog.factionsecurity.com/en-ushttps://blog.factionsecurity.com/blog/see-you-at-sector-arsenal-2026/https://blog.factionsecurity.com/blog/see-you-at-sector-arsenal-2026/We're heading back to Black Hat SecTor Arsenal on October 8th to demo OWASP Faction 2.0 live. Come say hi, grab some stickers, and tell us what would make your reporting workflow better.Fri, 11 Sep 2026 00:00:00 GMTNewsSecTorBlackhatOWASPPentestinghttps://blog.factionsecurity.com/blog/stop-writing-pentest-reports-by-hand-create-custom-ai-prompts-in-owasp-faction-2/https://blog.factionsecurity.com/blog/stop-writing-pentest-reports-by-hand-create-custom-ai-prompts-in-owasp-faction-2/Are you a penetration tester? Do you hate writing reports? Yeah, me too. Most of us got into this to break things, not to spend the last three days of an…Wed, 09 Sep 2026 00:00:00 GMTOWASPApplication SecurityPenetration TestingInformation Securityhttps://blog.factionsecurity.com/blog/releasing-faction-2-0-at-blackhat-arsenal-2026/https://blog.factionsecurity.com/blog/releasing-faction-2-0-at-blackhat-arsenal-2026/I’m excited to announce that I’ll be returning to Black Hat Arsenal 2026 in Las Vegas and SecTor 2026 in Canada to demo OWASP Faction 2.0 — the biggest…Sun, 26 Jul 2026 00:00:00 GMTCybersecurityRed TeamPentestingHackingApplication Securityhttps://blog.factionsecurity.com/blog/faction-enterprise-1-8-9-multi-format-pentest-reports-encrypted-pdfs-and-faster/https://blog.factionsecurity.com/blog/faction-enterprise-1-8-9-multi-format-pentest-reports-encrypted-pdfs-and-faster/Your workflow shouldn’t slow you down when you’re already juggling assessments, client deadlines, and a team that needs answers fast. Over the past few…Fri, 03 Jul 2026 00:00:00 GMTApplication SecurityPenetration TestingHackingRed Teamhttps://blog.factionsecurity.com/blog/automate-your-pentesting-workflow-connecting-faction-to-ai-agents-via-mcp/https://blog.factionsecurity.com/blog/automate-your-pentesting-workflow-connecting-faction-to-ai-agents-via-mcp/OWASP Faction is a free opensource tool that you can use to automate pentest reporting and other workflows. We are going to dig into how you using agentic…Tue, 19 May 2026 00:00:00 GMTAI Cyber SecurityPentestingMCP ServerRed Teamhttps://blog.factionsecurity.com/blog/vibe-coding-faction-extensions-at-phreaknic-26/https://blog.factionsecurity.com/blog/vibe-coding-faction-extensions-at-phreaknic-26/I just got back from speaking at PhreakNic 26 where I vibe coded a GitHub Faction Extension live while also speaking about my many misadventures in vibe…Fri, 21 Nov 2025 00:00:00 GMTAppSecCybersecurityHackingVibe CodingPenetration Testinghttps://blog.factionsecurity.com/blog/black-hat-2025-arsenal-experience/https://blog.factionsecurity.com/blog/black-hat-2025-arsenal-experience/I know this post is kind of late, but I’m just now getting around to posting about my Black Hat USA 2025 and SECTOR 2025 Arsenal experiences. For context,…Tue, 11 Nov 2025 00:00:00 GMTHacking ToolsAppSecPentesting ToolsPentestingBlackhathttps://blog.factionsecurity.com/blog/owasp-faction-1-7-major-updates-for-enterprise-security-teams/https://blog.factionsecurity.com/blog/owasp-faction-1-7-major-updates-for-enterprise-security-teams/For enterprise penetration testing teams and security consulting firms managing multiple assessments, staying organized is essential. OWASP Faction 1.7…Mon, 27 Oct 2025 00:00:00 GMTRedteam ToolPenetration TestingCybersecurityApplication SecurityWeb App Pentestinghttps://blog.factionsecurity.com/blog/automate-pentest-reports-with-boilerplates/https://blog.factionsecurity.com/blog/automate-pentest-reports-with-boilerplates/If you have been doing penetration testing for any length of time, you probably have a personal database of vulnerability descriptions, recommendations, and…Wed, 11 Dec 2024 00:00:00 GMTVulnerability ManagementPenetration TestingRed TeamHacking ToolsApplication Securityhttps://blog.factionsecurity.com/blog/how-to-automate-pentest-reporting-using-faction/https://blog.factionsecurity.com/blog/how-to-automate-pentest-reporting-using-faction/Faction is an open-source security assessment collaboration framework designed to streamline and enhance your security workflows. With Faction, you can:Thu, 21 Nov 2024 00:00:00 GMTPentestingVulnerability AssessmentVulnerability ManagementEthical HackingHacking