- Home
- Penetration Testing Software
- Ghostwriter
Ghostwriter
What it is
Ghostwriter is a free, open-source platform for red teams and security consultants to plan, manage, and document assessments. It organizes clients, projects, assets, findings, and evidence in a collaborative environment. Teams can generate Word reports with Jinja2 templates and also produce XLSX, PPTX, and JSON outputs. Reports may use historical client, project, infrastructure, and finding data; the project notes that more built-in statistics are planned. Role-based access controls, single sign-on, and multi-factor authentication support access management. A GraphQL API enables custom project-management and reporting workflows plus connections to external tools. Ghostwriter can automatically log activity from Mythic C2 and Cobalt Strike, and its documentation describes incorporating BloodHound data into reports. The Django web application is available through web, API, and self-hosted deployment options. It is licensed under BSD-3. Setup instructions are documented, while support points include the BloodHound Slack Team’s #ghostwriter channel and GitHub issues.
For and against
For
- Free and open-source BSD-3 software
- Generates Word, XLSX, PPTX, and JSON reports
- Supports role-based access, SSO, and MFA
- GraphQL API connects external tools
- Logs Mythic C2 and Cobalt Strike activity
Against
- More built-in statistics are still planned
- Requires documented Django installation and setup
- BloodHound reporting relies on documented integration
- Support is directed to Slack and GitHub issues
The verdict
Ghostwriter brings assessment management, evidence, integrations, and multi-format reporting into one open-source platform. Its deployment choices and security controls make it suitable for collaborative offensive-security documentation.
Who it suits
It suits red teams and security consultants who need a shared system for organizing assessments, evidence, findings, and client reporting. Teams wanting web, API, or self-hosted deployment can use the documented Django application.
Plans and prices
Ghostwriter
Entirely free and open-source software · BSD-3 license
Read 8 Oct 2026 · ghostwriter.wiki
On the record
- Access controls
- The platform supports role-based access controls, single sign-on, and multi-factor authentication.ghostwriter.wiki · read 8 Oct 2026
- API
- A GraphQL API supports custom project management, reporting workflows, and connections to external tools.ghostwriter.wiki · read 8 Oct 2026
- BloodHound
- The documentation includes a BloodHound integration for using BloodHound data in Ghostwriter reports.ghostwriter.wiki · read 8 Oct 2026
- Deployment
- Ghostwriter is a Django web app with installation and setup instructions in its documentation.ghostwriter.wiki · read 8 Oct 2026
- Integrations
- Ghostwriter can automatically log activity from Mythic C2 and Cobalt Strike.ghostwriter.wiki · read 8 Oct 2026
- Intended users
- The project describes Ghostwriter as a collaborative environment for red teams and consultants to plan, execute, and document assessments.ghostwriter.wiki · read 8 Oct 2026
- License
- The project is licensed under BSD-3.ghostwriter.wiki · read 8 Oct 2026
- Purpose
- Ghostwriter is an open-source platform for offensive security teams to manage assessments, clients, projects, assets, and reporting.ghostwriter.wiki · read 8 Oct 2026
- Reporting scope
- The reporting documentation says reports can use historical client, project, infrastructure, and finding data; more built-in statistics are planned.ghostwriter.wiki · read 8 Oct 2026
- Reports
- It generates Word reports with Jinja2 templates and can also produce XLSX, PPTX, and JSON reports.ghostwriter.wiki · read 8 Oct 2026
- Support
- The project README directs users to the BloodHound Slack Team’s #ghostwriter channel and GitHub issues for help.github.com · read 8 Oct 2026
