License overview

The Community edition source is available under the GNU Affero General Public License version 3.0. The full license text is in the product repository.

Practical implications:

• You can self-host and use it for any purpose, including commercial pentesting work.
• If you modify the source and offer the modified version to others over a network, you must release those modifications under the same license.
• You may not relicense the Community edition under a more permissive license.

The Professional and Enterprise editions add commercial features (cloud AI, RBAC, audit logging, SSO, server-side PDF, compliance mapping, and others). These editions are governed by a separate commercial license agreement.

Buying a commercial edition lets you keep modifications private, obtain support and SLAs, and (where applicable) receive indemnity for the commercial features.

To request the agreement, write to yabetsworkaferahu@gmail.com or use the contact form.

PentestFlow uses open source components (Next.js, FastAPI, PostgreSQL, Ollama, and others). Their licenses are listed in the product repository under the corresponding directories.