As with every task, web security testing is not so different in the sense that it requires some bookkeeping. Use the Readme feature to make simple lists of tasks that need to be done or use it as a place for preparing payloads or really anything you consider useful.

The Readme content is automatically saved in your project file and your fiddles.