Dradis Framework - Colllaboration and reporting for IT Security teams

Goals

• Share the information effectively.
• Easy to use, easy to be adopted. Otherwise it would present little benefit over other systems.
• Flexible: with a powerful and simple extensions interface.
• Small and portable. You should be able to use it while on site (no outside connectivity). It should be OS independent (no two testers use the same OS).

Some of the features:

• Platform independent
• Markup support for the notes: text styles, code blocks, images, links, etc.
• Integration with existing systems and tools:
  • Brakeman
  • Burp Suite
  • MediaWiki
  • Metasploit
  • Nessus
  • NeXpose
  • Nikto
  • Nmap
  • OpenVAS
  • OSVDB
  • Qualys
  • Retina
  • SureCheck
  • VulnDB
  • w3af
  • wXf
  • Zed Attack Proxy
  • ...
  • Full list

Editions

• Dradis Framework Community Edition (CE): open-source and available freely under the GPLv2 license.
• Dradis Framework Professional Edition (Pro): includes extra features that are more useful for organizations dealing with bigger teams and multiple projects at a time. To use Pro and get official support please become a subscriber.

Getting started: Community Edition

Git release (recommended)

$ git clone https://github.com/dradis/dradis-ce.git
$ cd dradis-ce/
$ ruby bin/setup
$ bundle exec rails server