reptor

reptor allows you to automate pentest reporting with SysReptor.

You can use reptor as a command line (CLI) tool:

reptor exportfindings --format json

Or use it as a Python library:

from reptor import Reptor

reptor = Reptor(
    server=os.environ.get("REPTOR_SERVER"),
    token=os.environ.get("REPTOR_TOKEN"),
    project_id="41c09e60-44f1-453b-98f3-3f1875fe90fe",
)
reptor.api.projects.get_project()

You can use it to:

• Create findings and notes from tool outputs
• Upload evidences (also bulk upload)
• Import data from other reporting tools
• Manage projects
• Read, update, create findings
• Download PDF reports
• Read, update, create notes
• Export notes as PDF
• and more...

GitHub: https://github.com/Syslifters/reptor/
Python Library Docs: https://docs.sysreptor.com/python-library/
CLI Docs: https://docs.sysreptor.com/cli/getting-started/
PyPi: https://pypi.org/project/reptor/

Prerequisites

• Python 3.10-3.14
• pip3

Installation

From pypi

pip3 install reptor

Optional dependencies

• translate (requires deepl)
• ghostwriter (requires gql)
• dev (requires pytest)

Install by pip3 install reptor[translate].
Install all optional dependencies using pip3 install reptor[all]

From source

git clone https://github.com/Syslifters/reptor.git
cd reptor
pip3 install .

Install optional dependencies by pip3 install .[all].

From BlackArch

pacman -S reptor

Usage

              [--timeout SECONDS] [--personal-note] [-v] [--debug]
              [-n NOTETITLE] [--no-timestamp] [--file FILE]

Examples:
                reptor conf
                echo "Upload this!" | reptor note
                reptor file data/*
                cat sslyze.json | reptor sslyze --json --push-findings
                reptor nmap --xml --upload -i nmap.xml

options:
  -h, --help            show this help message and exit
  -v, --verbose         increase output verbosity (> INFO)
  --debug               sets logging to DEBUG
  -n NOTETITLE, --notetitle NOTETITLE
  --no-timestamp        do not prepend timestamp to note
  --file FILE           Local file to read

subcommands:
  
  Core:
   conf                  Shows config and sets config
   mcp                   Starts the Model Context Protocol (MCP) server
   plugins               Allows plugin management & development
  
  Projects & Templates:
   ai                    Process report sections using OpenAI with dynamic skill selection
   createproject         Create a new pentest project
   deletefindings        Deletes findings by title
   deleteprojects        Deletes projects by title
   exportfindings        Export your project findings as a summary or checklist
   file                  Uploads a file
   finding               Uploads findings from JSON or TOML
   findingfromtemplate   Creates findings from remote finding templates
   note                  Uploads and lists notes
   project               Work with projects
   pushproject           Push data to project from JSON or TOML
   template              Queries Finding Templates from SysReptor
   translate             Translate Projects to other languages via Deepl
  
  Tools:
   burp                  Burp vulnerability importer
   nessus                Nessus vulnerability importer
   nmap                  format nmap output
   openvas               OpenVAS vulnerability importer
   qualys                Qualys vulnerability importer
   sslyze                format sslyze JSON output
   zap                   Parses ZAP reports (JSON, XML)
  
  Importers:
   defectdojo            Imports DefectDojo finding templates
   ghostwriter           Imports GhostWriter finding templates
   importers             Show importers to use to import finding templates
  
  Utils:
   packarchive           Pack directories into a .tar.gz file
   unpackarchive         Unpack .tar.gz exported archives

configuration:
  -s SERVER, --server SERVER
  -t TOKEN, --token TOKEN
                        SysReptor API token
  -k, --insecure        do not verify server certificate
  -p PROJECT_ID, --project-id PROJECT_ID
                        SysReptor project ID
  --timeout SECONDS     HTTP request timeout in seconds (default: 30)
  --personal-note       add notes to personal notes