Tandera

Tandera is a pentest workflow platform for offensive security teams. It maps a target's attack surface through automated recon - subdomains, DNS, open ports, web tech, TLS, cloud assets and leaked credentials - and opens a finding automatically when recon matches a known vulnerability.

Findings from 120+ tools (Burp Suite, Nuclei, OWASP ZAP, Caido, Nessus, Nmap, Trivy, sqlmap) normalize into one deduplicated source of truth. Severity, CVSS, EPSS, KEV, CWE, CVE, OWASP, MITRE ATT&CK, compliance mapping, evidence and provenance travel with every finding.

Related findings are chained into attack paths, so a leaked credential that becomes domain admin is shown as the sequence an attacker would actually take - not as four unrelated medium-severity rows.

Reports ship as white-label PDF and PPTX generated straight from the canonical findings. A secure client portal tracks each finding from open to verified, with retests requested and closed in place.