Dossier Overview
Introduction
Dossier is a security assessment platform for managing penetration testing engagements, vulnerability findings, client relationships, and deliverables. It gives your team a single place to plan projects, document findings, track consultant schedules, log billable hours, and deliver reports to clients through a dedicated client portal.
The application is organized around organizations (business units within your tenant), clients, and projects. Team members work inside an organization context, while client accounts access a simplified portal scoped to their assigned client.
Key Features
- Organization Management — Create organizations, assign team members, and switch between org contexts from the sidebar.
- Client Management — Maintain client profiles, logos, email recipients, and Jira integrations.
- Project Management — Create projects with tags and industries, manage lifecycle status, and track phases.
- Findings — Document vulnerabilities with severity, CVSS scores, markdown content, comments, and version history.
- Assets — Maintain a hierarchical asset tree for each project scope.
- Project Overview — Write a rich-text project narrative with client visibility controls and PDF export.
- Reports — Build reports from templates using the report editor, then generate PDFs for delivery.
- Forms — Create client questionnaires from templates and share them via public links.
- Schedules — View consultant availability across projects and users at the org or global level.
- Time Logs — Log hours against scheduled tasks with billable, non-billable, and internal categories.
- Templates — Reusable finding, report, form, and email templates at the organization level.
- Users & Roles — Manage team members and client accounts with granular role-based permissions.
- Dashboards — Analytics for organizations, clients, projects, and the entire tenant.
User Types
| Type | Description |
|---|---|
| Team member | Full sidebar access. Can work across organizations, manage projects, write findings, and configure templates. |
| Client account | Simplified top navigation scoped to one client. Can view non-draft projects, findings, assets, and submit forms. |
Why Use Dossier?
Dossier centralizes everything involved in a security engagement — from scheduling consultants and logging hours to writing findings and delivering reports. It improves transparency for clients through the portal, enforces consistent documentation via templates, and gives managers visibility into project status, remediation progress, and team utilization.