What is Pwnbook?
Pwnbook gives security teams a unified workspace for aggregating security findings, reviewing pull requests, running AI-assisted analysis, and managing integrations with the tools they already use. Work is organized around organizations — your team’s workspace where members, integrations, and configuration live together.Key capabilities
Security Workbench
A unified view of your security posture: open PRs needing review, active findings, and tool statuses — all in one dashboard.
AI Security Assistant
Chat with an AI assistant for methodology guidance, payload ideas, code review, and security research. Powered by Anthropic or OpenAI.
GitHub PR Review
Review pull requests, view file diffs, read and post comments, and approve PRs without leaving Pwnbook.
Security Findings
Pull findings from SAST, SCA, cloud security, and vulnerability management tools into a single view.
Cloud Security
Discover AWS resources and identify cloud misconfigurations directly inside Pwnbook.
OpenAPI Viewer
Import and browse OpenAPI specs from URLs, file uploads, or GitHub repositories with a built-in viewer.
Platform architecture
Frontend
Frontend
A React 18 application built with Vite, TypeScript, and shadcn/ui. Communicates with the backend API over HTTP.
Backend API
Backend API
A Fastify (Node.js + TypeScript) server. Handles authentication via WorkOS, all business logic, and database interactions via Drizzle ORM on PostgreSQL.
Database & Queue
Database & Queue
PostgreSQL for persistent storage. Redis + BullMQ for background job processing.
Get started
Quickstart
Create your account, set up your organization, and explore the platform.
Self-Hosting
Deploy Pwnbook on your own infrastructure using Docker Compose.
Core Concepts
Understand how organizations and roles work.
API Reference
Integrate Pwnbook into your workflows using the REST API.