Engagement Log — Pentest Reporting Toolkit

Track authorized security engagements, log findings, capture evidence, and export client-ready reports.

A Chrome extension built for pentesters and security folks who are tired of juggling five different tabs to encode a string, decode a JWT, and write up findings. Free tier gets you: Base64 / URL / Hex / HTML entity encoder-decoder JWT inspector (decode header + payload, catch expired tokens) Hash generator (MD5, SHA-1, SHA-256, SHA-512) Quick reference: OWASP Top 10, security headers checklist, HTTP status codes 1 engagement, 3 findings included Pro unlocks: Unlimited engagements and findings Full findings tracker — severity, CVSS score, affected URL, repro steps, remediation notes Screenshot capture straight from the popup, attached to findings One-click print-ready report export per engagement — client name, scope, findings, evidence, all formatted and ready to save as PDF Why it's different: Everything's stored locally in your browser (chrome.storage.local). Nothing leaves your machine unless you export a report yourself. No account required, no cloud sync, no data collection. One-time payment for Pro — no subscription, ever.