Ghostwriter
Ghostwriter is an open-source workspace for red teams and consultants to organize security assessments, from client and project details to assets, findings, …
What Ghostwriter is
Ghostwriter is an open-source workspace for red teams and consultants to organize security assessments, from client and project details to assets, findings, evidence, and reports. It can generate Word documents using Jinja2 templates and also export XLSX, PPTX, and JSON reports. Reports can draw on historical client, project, infrastructure, and finding information; the project says additional built-in statistics are planned. The platform supports role-based access controls, single sign-on, and multi-factor authentication. Its GraphQL API can support custom project management and reporting workflows, as well as connections to external tools. Ghostwriter can automatically record activity from Mythic C2 and Cobalt Strike, and its documentation covers incorporating BloodHound data into reports. It is a Django web app available for web, API, and self-hosted use. Ghostwriter is licensed under BSD-3 and is free and open source. Setup instructions are in the documentation, and the README directs users to GitHub issues and the BloodHound Slack Team’s #ghostwriter channel for help.
Good
- Generates Word, XLSX, PPTX, and JSON reports.
- Includes role-based access, SSO, and MFA.
- Can log Mythic C2 and Cobalt Strike activity.
- Free and open source under BSD-3.
Watch out
- More built-in reporting statistics are planned.
- Requires installation and setup as a Django web app.
Who it suits
Ghostwriter suits red teams and security consultants who need a shared way to plan, manage, and document assessments. Its reporting and API features may also suit teams with custom workflows or external tool connections.
Verdict
Ghostwriter brings assessment management, evidence capture, and report generation into one collaborative platform. Teams should account for its self-hosted setup and the fact that more built-in report statistics are planned.
Plans and prices
From Ghostwriter's own pricing page, checked 8 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Ghostwriter | Free | Entirely free and open-source software · BSD-3 license |
The facts
Each one read from Ghostwriter's own pages, with the date it was checked.
What it does
- Access controls
- The platform supports role-based access controls, single sign-on, and multi-factor authentication.checked 8 Oct 2026
- API
- A GraphQL API supports custom project management, reporting workflows, and connections to external tools.checked 8 Oct 2026
- BloodHound
- The documentation includes a BloodHound integration for using BloodHound data in Ghostwriter reports.checked 8 Oct 2026
- Deployment
- Ghostwriter is a Django web app with installation and setup instructions in its documentation.checked 8 Oct 2026
- Integrations
- Ghostwriter can automatically log activity from Mythic C2 and Cobalt Strike.checked 8 Oct 2026
- Intended users
- The project describes Ghostwriter as a collaborative environment for red teams and consultants to plan, execute, and document assessments.checked 8 Oct 2026
- License
- The project is licensed under BSD-3.checked 8 Oct 2026
- Purpose
- Ghostwriter is an open-source platform for offensive security teams to manage assessments, clients, projects, assets, and reporting.checked 8 Oct 2026
- Reporting scope
- The reporting documentation says reports can use historical client, project, infrastructure, and finding data; more built-in statistics are planned.checked 8 Oct 2026
- Reports
- It generates Word reports with Jinja2 templates and can also produce XLSX, PPTX, and JSON reports.checked 8 Oct 2026
- Support
- The project README directs users to the BloodHound Slack Team’s #ghostwriter channel and GitHub issues for help.checked 8 Oct 2026
Alternatives to Ghostwriter
- 1
Pentesterra
Free planWebAPIExtensionLinux7.7From €23 a month - 2
Kali Linux
Free planOpen sourceAndroidLinuxmacOSSelf-hosted7.6Free plan - 3
OWASP ZAP
Free planOpen sourceAPIExtensionLinuxmacOS7.6Free plan - 4
Dradis
Free planWebAPILinuxmacOS7.1From $3,600 a year - 5
w3af
Free planWebAPILinuxmacOS6.8Free plan - 6
Caido
Free planWebAPILinuxmacOS6.6Free plan