Ghostwriter

Spec sheet

Purpose

Ghostwriter is an open-source platform for offensive security teams to manage assessments, clients, projects, assets, and reporting.Read 8 Oct 2026 · ghostwriter.wiki

Intended users

The project describes Ghostwriter as a collaborative environment for red teams and consultants to plan, execute, and document assessments.Read 8 Oct 2026 · ghostwriter.wiki

Deployment

Ghostwriter is a Django web app with installation and setup instructions in its documentation.Read 8 Oct 2026 · ghostwriter.wiki

API

A GraphQL API supports custom project management, reporting workflows, and connections to external tools.Read 8 Oct 2026 · ghostwriter.wiki

Integrations

Ghostwriter can automatically log activity from Mythic C2 and Cobalt Strike.Read 8 Oct 2026 · ghostwriter.wiki

Support

The project README directs users to the BloodHound Slack Team’s #ghostwriter channel and GitHub issues for help.Read 8 Oct 2026 · github.com

License

The project is licensed under BSD-3.Read 8 Oct 2026 · ghostwriter.wiki

Access controls

The platform supports role-based access controls, single sign-on, and multi-factor authentication.Read 8 Oct 2026 · ghostwriter.wiki

BloodHound

The documentation includes a BloodHound integration for using BloodHound data in Ghostwriter reports.Read 8 Oct 2026 · ghostwriter.wiki

Reporting scope

The reporting documentation says reports can use historical client, project, infrastructure, and finding data; more built-in statistics are planned.Read 8 Oct 2026 · ghostwriter.wiki

Reports

It generates Word reports with Jinja2 templates and can also produce XLSX, PPTX, and JSON reports.Read 8 Oct 2026 · ghostwriter.wiki

Plans and prices

Every Ghostwriter plan and price →

Where Specifiction places it

• Penetration Testing Software#18 of 347.7