HuntFlow

What is HuntFlow?

HuntFlow is a local-first Penetration Testing workspace for penetration testers, red teams, and bug-bounty researchers. The platform organizes engagements, targets, testing sessions, notes, reconnaissance assets, evidence, findings, reports, and testing analytics.

Key Capabilities

Engagement management: Users can track engagement scope, targets, priorities, test sessions, and findings.
Notes and evidence: HuntFlow supports structured Markdown notes, reusable templates, reconnaissance-asset organization, and evidence linked to findings through an evidence canvas.
Reporting: The platform provides finding-severity tracking and report export in PDF and Markdown formats.
Testing utilities: Built-in utilities support encoding, decoding, JWT inspection, hashing, random-token generation, and scope validation.
Workflow tools: A command palette, keyboard-first navigation, pause-aware focus sessions, and analytics dashboard support individual testing workflows.
Local operation: The MIT-licensed core runs in a browser through npx huntflow@latest, stores data in IndexedDB, works offline, does not require an account, and does not send telemetry.
Optional cloud services: HuntFlow Pro adds end-to-end encrypted cross-device synchronization, encrypted automatic backups, priority email support, and early access to upcoming features.

Audience & Use Cases

Audience: Penetration testers, red-team operators, and bug-bounty researchers.
Use Case: Security practitioners can document testing activity, manage evidence and findings, prepare reports, and retain engagement data in a local browser-based workspace.