Two engines, one data source
PDF reports are rendered from HTML/Jinja2 templates by a headless Chromium; Word reports from .docx templates via docxtpl. Both consume exactly the same context: the full project, client, contacts, vulnerabilities, infrastructure, company and executive summary.
Hot editing
Templates live in a mounted volume. You can edit them and regenerate a report immediately, with no image rebuild and no service restart.
Data available in the template
- The project and all of its metadata
- The client, their contacts and their logo
- Every vulnerability, with CVSS 3.1 and 4.0 vectors and scores
- The infrastructure inventory: hosts, open ports, detected services
- The issuing company, its logo and the internal contact
Reports prefer CVSS 4.0 when it is present and fall back to CVSS 3.1 otherwise. Handle both cases in your template.
Multilingual output
Vulnerability content is rendered in the project language. Automatic captions (figure, table and appendix numbering) are translated independently, with nothing to do on your side.