Knowledge base
14 methodology playbooks, 108 cheat-sheets, and semantic search across everything.
Self-hosted · Cloud · Dedicated
The Pentester's OS
Run your entire pentest practice from one command center. Clients, engagements, findings, evidence, reports, invoices, playbooks, and AI — all in one place. Available in cloud, self-hosted, or dedicated deployments.
Private by design · No telemetry · Local AI
athelos.local
Built by a pentester, for pentesters
0
Playbooks
0
Cheat-sheets
0
ATT&CK mappings
0+
Database tables
Everything a pentester needs, however you want to run it.
Clients, engagements, findings, evidence, reports, invoices, playbooks, cheat-sheets, and local AI — all in one place. Cloud, self-hosted, or dedicated. Same platform, same workflow, your data stays yours.
Five pillars. One platform.
Every feature belongs to Knowledge, Operations, Delivery, Business, or Toolbox. Together, they cover the entire pentest workflow.
Engagements
Full lifecycle: scope, findings, evidence, time tracking, and reporting.
Reports
Seven templates, template-aware preview, PDF export, and signed client delivery links.
Business
CRM, contracts, rate cards, scoping calculator, invoices, and financial dashboard.
AI assist
Local Ollama, RAG over your knowledge base, exec summaries, remediation suggestions. Never cloud.
Toolbox
Tools, wordlists, payloads, labs, and infrastructure — cataloged, searchable, ready.
Workflow
From client intake to signed delivery.
ATHELOS walks the entire engagement lifecycle. Every step connects to the next — no tab-juggling, no lost context.
01
Run the engagement
Open a client, define scope, load a playbook. Track every task, attach findings as you go, and keep time against the work.
- 14 methodology playbooks
- Task-level tracking
- Evidence vault with SHA-256
athelos.local
02
Log findings and evidence
Every finding carries severity, CVSS, ATT&CK mapping, evidence, and remediation. Nothing gets lost between notes and report.
- Severity and CVSS
- ATT&CK auto-mapping
- Chained evidence
athelos.local
03
Deliver the report
Pick a template, edit sections, export PDF, and send a signed delivery link. Track views, revoke access, version the report.
- Seven report templates
- PDF via headless render
- Signed client delivery links
athelos.local
Pricing
Self-hosted. One license. No hosting bill.
ATHELOS runs on your machine. You own the data, the deployment, and the uptime. The license unlocks the features you need.
Community
Freeforever
For individual operators and personal use.
- Single operator
- All playbooks and cheat-sheets
- Full engagement lifecycle
- Report templates and PDF export
- Local AI (bring your own Ollama)
Most popular
Solo
$29per month
For freelance pentesters running commercial work.
- Everything in Community
- Commercial use license
- Signed client delivery links
- Invoicing and financial dashboard
- Email support
Studio
$89per month
For small teams of up to five pentesters.
- Everything in Solo
- Up to 5 operators
- Shared engagements and evidence
- Team activity log
- Priority support
Enterprise
Customannual
For large teams, MSSPs, and regulated environments.
- Everything in Studio
- Unlimited operators
- SSO and audit exports
- On-prem or air-gapped deployment
- Dedicated support and SLA
All plans include every playbook, cheat-sheet, and template. You pay for the license, not the volume.
FAQ
Common questions
How can I run ATHELOS?
Three ways. Cloud — we host it, you sign up in a browser and start working in minutes. Self-hosted — you run the Docker image on your laptop, VPS, or server and keep everything on your infrastructure. Dedicated — we run it on private infrastructure for you, or ship it as an appliance to your data center for enterprise and government requirements.
Does it need an internet connection?
No. Once installed, ATHELOS works fully offline. The only optional feature that benefits from a connection is pulling AI models for the local Ollama runtime. Everything else — clients, engagements, findings, reports, invoices — works offline.
Where does client data live?
On whichever infrastructure you chose. Cloud — on our infrastructure, encrypted at rest and isolated per customer. Self-hosted — on yours, never leaving your network. Dedicated — on infrastructure provisioned specifically for your organization. No telemetry, no analytics, no cloud AI in any mode.
What are the hardware requirements?
Self-hosted: Node.js 22, Docker, and at least 4 GB of RAM. If you want the local AI layer, 8 GB is recommended for comfortable model performance. Cloud and dedicated have no local requirements — just a browser.
Can I use it with my team?
Yes. The Studio tier supports up to five operators with shared engagements and evidence. Enterprise removes the operator cap and adds SSO, audit exports, and dedicated support. Available in all three deployment models.
How do updates work?
Cloud and dedicated are updated automatically — you always have the latest version. Self-hosted: you pull the latest Docker image and restart. Your data persists. Releases follow semantic versioning, and breaking changes are documented in the changelog.
Run your practice from one OS.
Install in two minutes. Own every piece of the workflow — from client intake to signed delivery — without sending a byte to the cloud.