reptor
reptor allows you to automate pentest reporting with SysReptor.
You can use reptor as a command line (CLI) tool:
reptor exportfindings --format json
Or use it as a Python library:
from reptor import Reptor
reptor = Reptor(
server=os.environ.get("REPTOR_SERVER"),
token=os.environ.get("REPTOR_TOKEN"),
project_id="41c09e60-44f1-453b-98f3-3f1875fe90fe",
)
reptor.api.projects.get_project()
You can use it to:
- Create findings and notes from tool outputs
- Upload evidences (also bulk upload)
- Import data from other reporting tools
- Manage projects
- Read, update, create findings
- Download PDF reports
- Read, update, create notes
- Export notes as PDF
- and more...
GitHub: https://github.com/Syslifters/reptor/
Python Library Docs: https://docs.sysreptor.com/python-library/
CLI Docs: https://docs.sysreptor.com/cli/getting-started/
PyPi: https://pypi.org/project/reptor/
Prerequisites
- Python 3.10-3.14
- pipx
Install pipx (guide). Open a new shell after pipx ensurepath.
# macOS
brew install pipx
pipx ensurepath
# Ubuntu/Debian
sudo apt update && sudo apt install pipx
pipx ensurepath
# Fedora
sudo dnf install pipx
pipx ensurepath
# Windows (pip)
py -m pip install --user pipx
py -m pipx ensurepath
Installation
From pypi
pipx install reptor
Optional dependencies
- translate (requires deepl)
- ghostwriter (requires gql)
- ai (requires openai)
- mcp (requires mcp)
- dev (requires pytest)
Inject extras into an existing install (--force is required because pipx otherwise skips reptor, which is already installed):
pipx inject --force reptor 'reptor[mcp]'
pipx inject --force reptor 'reptor[all]'
Or install with extras from the start: pipx install 'reptor[translate]' or pipx install 'reptor[all]'.
From source
git clone https://github.com/Syslifters/reptor.git
cd reptor
pipx install .
Install optional dependencies by pipx install '.[all]' or pipx inject --force reptor 'reptor[all]'.
From BlackArch
pacman -S reptor
Usage
[--timeout SECONDS] [--personal-note] [-v] [--debug]
[-n NOTETITLE] [--no-timestamp] [--file FILE]
Examples:
reptor conf
echo "Upload this!" | reptor note
reptor file data/*
cat sslyze.json | reptor sslyze --json --push-findings
reptor nmap --xml --upload -i nmap.xml
options:
-h, --help show this help message and exit
-v, --verbose increase output verbosity (> INFO)
--debug sets logging to DEBUG
-n NOTETITLE, --notetitle NOTETITLE
--no-timestamp do not prepend timestamp to note
--file FILE Local file to read
subcommands:
Core:
conf Shows config and sets config
mcp Starts the Model Context Protocol (MCP) server
plugins Allows plugin management & development
Projects & Templates:
ai Process report sections using OpenAI with dynamic skill selection
createproject Create a new pentest project
deletefindings Deletes findings by title
deleteprojects Deletes projects by title
exportfindings Export your project findings as a summary or checklist
file Uploads a file
finding Uploads findings from JSON or TOML
findingfromtemplate Creates findings from remote finding templates
note Uploads and lists notes
project Work with projects
pushproject Push data to project from JSON or TOML
template Queries Finding Templates from SysReptor
translate Translate Projects to other languages via Deepl
Tools:
burp Burp vulnerability importer
nessus Nessus vulnerability importer
nmap format nmap output
openvas OpenVAS vulnerability importer
qualys Qualys vulnerability importer
sslyze format sslyze JSON output
zap Parses ZAP reports (JSON, XML)
Importers:
defectdojo Imports DefectDojo finding templates
ghostwriter Imports GhostWriter finding templates
importers Show importers to use to import finding templates
Utils:
packarchive Pack directories into a .tar.gz file
unpackarchive Unpack .tar.gz exported archives
configuration:
-s SERVER, --server SERVER
-t TOKEN, --token TOKEN
SysReptor API token
-k, --insecure do not verify server certificate
-p PROJECT_ID, --project-id PROJECT_ID
SysReptor project ID
--timeout SECONDS HTTP request timeout in seconds (default: 30)
--personal-note add notes to personal notes
1 maintainer
Metadata
1 maintainer
Release files for reptor 0.39
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| reptor-0.39.tar.gz | 225.1 kB | With provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| reptor-0.39-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 522.8 kB
Release files / reptor-0.39.tar.gz
| Download URL | reptor-0.39.tar.gz |
|---|---|
| Size | 225.1 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
5e2a3bbd21116950391261767af5152bd0b57cf208cdc94e18bcd89c9c0e37f7
|
|
BLAKE2b-256 checksum How to use checksums |
19e2ab5dd74a4bd758d6abcfc5fdbcfd872391611d6b5b88eb2d9f0a1ac3dde8
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 19, 2026.
Transparency logRelease files / reptor-0.39-py3-none-any.whl
| Download URL | reptor-0.39-py3-none-any.whl |
|---|---|
| Size | 297.7 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
587c7c2900f7047ff9bf4ec8798549b376a6a3e814c6b5c70ae49c4f0589ff0a
|
|
BLAKE2b-256 checksum How to use checksums |
3b4109d17f38a12641dc51432f3fd9b9f4f66b69a0444909a7e0a5e474e74bcc
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 19, 2026.
Transparency logSecurity for reptor 0.39
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for reptor-0.39.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 19, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
