Introduction

Kallistra is an offline-first penetration testing workspace in development for Windows and Linux. It is intended for independent penetration testers and security consultancies who need to organise assessment work and explain the results.

One connected engagement record

Assets establish what was assessed. Findings explain what the tester observed and why it matters. Evidence supports those conclusions. The report brings the relevant details together for the client.

Kallistra’s goal is to keep those records connected so a reviewer can trace a report statement back to its supporting evidence and affected assets. See The engagement record for a practical example of how these records relate.

Offline-first

Kallistra is designed around a desktop workspace that holds engagement data locally. The public website and documentation are separate from that workspace. Read Local data and offline operation for the implications when handling assessment material.

Documentation status

These early guides explain the product direction and the concepts behind it. The application is still in development. Release-specific procedures will be added as they are verified against the desktop application.