Gammor
Pentest reports, done in a fraction of the time.
We built Gammor because report writing was taking longer than the testing itself. It is an AI-assisted reporting platform: it drafts findings, keeps the evidence attached to them, and applies your branding to the document at export. Your testers spend more of their time testing.
What Gammor does
Drafting, evidence, review, branding and delivery in a single platform, replacing the shared drive, the Word template and the scattered email threads.
AI-assisted reporting
Drafting from a blank page is the slowest part of reporting. Gammor removes that step.
AI-assisted finding generation
Describe what you found and the AI drafts the title, impact and remediation. The output is a first draft for your testers to review and refine, not a finished report.
Reusable finding templates
Save a recurring finding once and reuse it across engagements, so every tester on your team describes the same issue in the same way.
Project organization
Evidence is attached to the finding it supports, and every engagement follows the same structure, so any team member can take over mid-engagement.
Compliance-ready output
The exported document is the one you deliver to the client.
Branded Word and PDF reports
Your branding is applied on export: Word for clients who need to comment on the draft, PDF for final delivery.
CERT-In layout
Indian engagements follow a format the regulator expects. Switch the layout and the same findings are exported in it, with no manual rebuilding of the document.
GDPR readiness
For clients in the EU, questions about data handling will arise. Gammor was built with those requirements in mind.
Secure collaboration
Reports are delivered through controlled access, not as email attachments.
Secure client portal
Clients review their findings in the browser rather than through a downloaded PDF that continues to circulate. When the engagement closes, access can be revoked.
Role-based access control
Admin, lead, tester, reviewer and viewer roles. A junior tester and a client reviewing results do not require the same permissions.
Enterprise controls
Controls that address the questions procurement teams ask.
Complete audit trail
Every change is recorded with its author and timestamp, so you can account for decisions such as a finding moving from high to medium severity.
Per-workspace data isolation
No workspace can query another workspace's data. That boundary is enforced at the data layer, not in the interface.
Who it's for
Teams that produce penetration test reports as a core part of their work.
Penetration testing firms
Back-to-back engagements leave little room for documentation, and reporting is usually the phase that slips.
MSSPs
Dozens of client accounts, each requiring its own branding and its own access. Maintaining that separation manually risks the wrong report reaching the wrong client.
In-house security teams
You assess your own estate, then document it twice: engineering requires reproduction steps, the auditor requires evidence. The same findings, in different documents.
Getting access to Gammor
There is no self-service signup. We onboard every team ourselves, so your branding, your roles and your report templates are already in place before anyone on your side first logs in.
- Access is invite-based. We provision new workspaces ourselves
- A 7-day trial, sufficient to run a full engagement through the platform
- Monthly or yearly billing, whichever suits your organization
- Every plan includes the full platform. No features are reserved for higher tiers
- Unlimited projects and unlimited findings on every plan
- Pricing on request, quoted according to the size of your team
See Gammor on a real engagement
Tell us how your team reports today and where the process stalls. We will show you what Gammor changes, then set up a trial workspace so you can evaluate it on your own work.
Contact Us