Pentest Checklists help you standardize your testing methodologies. Because checklists are often linked to Control Groups, we recommend creating your Control Groups before setting up your Pentest Checklists.
You can find and manage your checklist templates by navigating to the left-hand menu and clicking Settings > Checklists.
Checklists follow a simple three-tier hierarchy:
Checklist: The main framework (e.g., OWASP ASVS 4.0 L3).
Task Group: A specific category within the framework (e.g., Security Verification Requirements).
Task: The individual action item (e.g., Verify cryptographic keys and certificates are unique to each device).
Creating and Configuring Checklist Templates
You can build and customize your own checklist templates directly from the settings menu.
Create a New Checklist
Navigate to Settings > Checklists.
Click the + New Checklist button.
- Complete the fields: Name, Description, Status, External References, and Managed by team.
- Click Save.
Add Task Groups
Task Groups help organize your checklist into logical sections.
Click on your newly created Checklist.
Click + New Task Group.
Enter a Code, Name, and Description.
Click Save.
Add Tasks
Tasks are the specific action items that pentesters will execute.
Click on the Task Group you just created.
Click + New Task.
Enter the task's Code, Name, Description, and any relevant External References.
Click Save.
Edit or Delete a Checklist
To modify or remove an existing checklist, click the three dots (...) on the far right of the checklist row and select either Edit or Delete.
Managing Checklists in a Project
You can manage task assignments and track their progress directly from the project's Checklist tab.
Updating Task Status
You can quickly update the progress of any checklist task without opening a separate menu:
Navigate to your project and open the Checklist tab.
Locate the task you are working on.
Click directly on the Status badge (e.g., To Do) in the grid.
Select the new status from the dropdown menu (To Do, In Progress, Skipped, or Completed).
The badge will instantly update to reflect your progress.
Editing Individual Tasks
If you need to change the assignee or edit task details:
Click the three dots (
...) in the Actions column next to the task and select Edit. (Alternatively, click directly on the Task Name).In the modal, you can update the Assigned To field, change the Status, and link Assets. See Linking Assets to Checklist Tasks for more information.
Click Save.
Bulk Actions for Tasks
To speed up your workflow, you can update multiple tasks at once using bulk actions:
Use the checkboxes on the left side of the grid to select multiple tasks (or click the Select all tasks checkbox at the top).
-
An action bar will appear above the task list with the following options:
Change status: Quickly apply a new status (such as Completed) to all selected tasks simultaneously.
Change Assignee: Reassign all selected tasks to a different team member in a single click.
Link Assets: Associate specific project assets with the selected tasks. (Read more about this in Linking Assets to Checklist Tasks.