Dradis vs Ghostwriter
Dradis
dradis.comGhostwriter
github.comSide by side
| Figure | Dradis | Ghostwriter |
|---|---|---|
| Price from | $300/mo | Free |
| Free plan | Yes | Yes |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | — |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 4 | 1 |
| Spec score · Penetration Testing Software | 8.6 (#4) | 7.7 (#18) |
| Integrations | Dradis lists 47+ scanner, ticketing, and SSO integrations, including Nessus, Burp Suite, Nmap, Qualys, Jira, and Okta. | Ghostwriter can automatically log activity from Mythic C2 and Cobalt Strike. |
| Intended users | Assess is presented for teams that deliver findings, while Remediate is for internal security teams that also track fixes. | The project describes Ghostwriter as a collaborative environment for red teams and consultants to plan, execute, and document assessments. |
| Purpose | Dradis supports security assessment work from engagement kickoff and collaboration through reporting, remediation, and workflow automation. | Ghostwriter is an open-source platform for offensive security teams to manage assessments, clients, projects, assets, and reporting. |
| Support | Paid plans include email and live chat support, and Community Edition users can ask questions on the forum. | The project README directs users to the BloodHound Slack Team’s #ghostwriter channel and GitHub issues for help. |
Plans
Dradis
- Community EditionFree
- Assess$3,600 a year
- Remediate$7,200 a year
- EnterprisePriced on request
In their own words
Dradis
Dradis supports security assessment work from kickoff through collaboration, reporting, remediation and workflow automation. It organizes assessment information with structured data, templates and automation to create consistent deliverables, and its review process lets teams examine work in a PR-style format before it reaches a report. Risk tools include CVSSv4, DREAD and MITRE ATT&CK calculators, with OWASP, PTES, OSCP, HIPAA, PCI and custom methodologies. Dradis lists more than 47 integrations across scanners, ticketing and SSO, including Nessus, Burp Suite, Nmap, Qualys, Jira and Okta. A REST API, webhooks and rules engine support integrations and automated workflows. Remediate adds tracking of fixes and integrations with Jira, Azure DevOps and ServiceNow. The software is self-hosted and can run without an internet connection; the maker says it cannot access customer data. Community Edition is free for one project at a time. Assess costs $3,600 a year and Remediate costs $7,200 a year, each with a three-seat minimum.
Ghostwriter
Ghostwriter has no write-up on Specifiction yet; its figures are above.