Platform
PyramidOS
The Operating System for Pentest Firms
A multi-tenant B2B SaaS platform that consolidates the complete operational lifecycle of boutique pentest firms — from lead capture, scoping, and proposal generation through project execution, findings management, branded report delivery, client portal, compliance tracking, and subscription billing. Built on Django 6 + DRF with a Next.js 16 front end.
- Security
- SaaS
- Pentest
- Platform
overview
What it is
A multi-tenant B2B SaaS platform — the operating system for modern pentest firms. It consolidates the whole pentest-firm lifecycle — lead capture and scoping, project management, a findings library, QA, branded report delivery, a secure client portal, compliance tracking, and subscription billing — into one platform. Each firm is an isolated tenant, and their end-clients use a firm-branded portal. It runs on a B2B subscription (Stripe), and firms keep all of their client revenue.
capabilities
Key features
End-to-End Project Lifecycle
Drives every engagement through an 11-state finite-state machine, from lead to delivery.
Findings Library & QA Workflow
A reusable findings library mapped to CWE/OWASP/CVSS with a draft → reviewed → approved → delivered QA flow.
Branded PDF Report Builder
Generates branded reports with WeasyPrint from per-tenant templates.
Secure Client Portal
A client portal with signed-URL sharing and self-service retest requests.
Compliance Tracking
Tracks ISO 27001, IASME, and Cyber Essentials engagements and evidence.
Multi-Tenant Billing & Security
Multi-tenant Stripe billing on PostgreSQL row-level security, with SSO/2FA and tool imports.
why it matters
Benefits
- A single pane of glass replaces a stack of fragmented tools.
- Client trust is reinforced by a branded, secure portal.
- Quality is enforced by a QA gate — author/QA separation and a draft-to-approved flow.
- Compliance tracking for ISO 27001, IASME, and Cyber Essentials is built in.
- Tenant isolation is enforced with PostgreSQL row-level security.
in practice
Use cases
the story
Problem, approach, outcome
- Problem
- Pentest firms juggle fragmented tools across the whole engagement lifecycle.
- Approach
- A multi-tenant SaaS spanning lead capture, project management, findings library, QA, branded reports, and a secure client portal.
- Outcome
- One platform from lead to delivered report, with quality gates and tenant isolation.
get in touch
Let's talk
Interested in PyramidOS, or want to see how it could fit your work? Email is the best way to reach TRAGenX — send us a note and we'll get back to you.