Overview
Pwnbook is organized around organizations — your team’s shared workspace. When you sign in, you’re working within an organization where members, integrations, and data all live together.1
Create your account
Navigate to your Pwnbook instance and sign in. Pwnbook supports two authentication modes:
- Local auth — email and password, no external dependencies
- WorkOS — SSO, MFA, SAML, and directory sync
2
Create or join an organization
An organization is your team’s workspace. All members and integrations belong to it.Creating a new organization:
- Click Create Organization on the home screen.
- Enter your organization name and click Create.
- You’re set as the Owner with full admin access.
On self-hosted instances, a single organization is created during setup and used by everyone. Additional organizations are optional.
3
Explore the platform
Once inside an organization, the sidebar gives you access to:
Security Workbench
A unified view of open PRs, active findings, and integration statuses.
AI Chat
Ask the AI assistant for security guidance, payload ideas, or code review.
GitHub PR Review
Review pull requests and leave comments without leaving Pwnbook.
Security Findings
View aggregated findings from your connected security tools.
4
Connect integrations
From Settings → Marketplace, enable integrations with your existing security toolchain:
- GitHub — PR review and code security
- Slack — notifications for security events
- AWS — cloud resource discovery and security posture
- Semgrep, Snyk, Checkmarx, Aikido, and more — pull security findings into the platform
5
Invite your team
From Settings → Members:
- Click Invite Member.
- Enter their email address and select a role.
- Click Send Invite.
Desktop App
Pwnbook ships a desktop application for macOS, Windows, and Linux with the same full-featured experience as the web app.- Download the installer from the Downloads section of your Pwnbook instance.
- Run the installer and launch Pwnbook.
- Sign in with your existing credentials.
The desktop app connects to the same backend as the web app. If self-hosting, configure the backend URL in the app settings.
Next steps
Configure integrations
Connect GitHub, Slack, AWS, and security scanning tools.
Self-hosting
Run Pwnbook on your own infrastructure.
Roles & Permissions
Understand what team members can do at each role level.
API Reference
Automate workflows using the Pwnbook REST API.