# BountyFlow

A penetration-testing management platform for security researchers, tracking targets, findings and tool output, and building a knowledge graph of relationships between them to visualize attack paths.

BountyFlow is a platform for penetration testers and cybersecurity researchers that manages a full test workflow from target identification to report generation. A dashboard tracks projects, attack trends and MITRE ATT&CK coverage, and separate views manage projects, targets, discovered assets and recorded findings with severity and evidence.

It executes security tools and shows their output in real time across multiple targets, and builds a security relationship map that automatically discovers connections between entities to visualize attack paths and attack chains as automated tool workflows. An AI assistant gives context-aware recommendations with a persistent chat history, and the platform can auto-generate professional test reports and keeps system-wide audit logs for team accountability.

The backend is Python and the project has been presented at security conferences including Black Hat Arsenal, ROOTCON and .HACK. It is MIT licensed.

Website: https://github.com/Trinity-SYT-SECURITY/BountyFlow