Which tool is described as a framework for collaboration and reporting in information security assessments?

• A. Nessus
• B. Burp Suite
• C. Dradis Tool
• D. Metasploit

Answer: (C)

Dradis is a framework designed to coordinate and document information security assessments. It provides a centralized workspace where teams can collect evidence, track findings, assign tasks, and generate client-ready reports. By supporting data import from other tools, templates for consistent reporting, and collaborative features, it helps manage the entire assessment lifecycle from discovery to final deliverables.

Nessus is a vulnerability scanner that detects and reports vulnerabilities, but it isn’t built as a team collaboration hub or a comprehensive reporting framework for the whole assessment. Burp Suite is a web application testing platform with tools for manual testing, scanning, and analysis, not a project-wide collaboration and reporting framework. Metasploit is an exploitation framework focused on developing and executing exploits, with reporting capabilities secondary to its core purpose.