1. [Home](https://www.g2.com/)
2. ...
3. [Penetration Testing Tools](https://www.g2.com/categories/penetration-testing-tools)
4. [Clone Systems Automated Penetration Testing Discussions](https://www.g2.com/products/clone-systems-automated-penetration-testing/discuss)

[
 ![Clone Systems Automated Penetration Testing](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_f9cd34b83e48418be8f0b3e95abe892d/clone-systems-automated-penetration-testing.png "Clone Systems Automated Penetration Testing")
](/products/clone-systems-automated-penetration-testing/reviews)

# Clone Systems Automated Penetration Testing Discussions

Clone Systems Automated Penetration Testing is an automated penetration test you buy online at a published price and start the same day. It runs real exploitation attempts against your external IPs and domains or your internal network and Active Directory using production-safe playbooks mapped to MITRE ATT&CK, and every confirmed finding carries proof of exploit. Authenticated web application testing is included. The report pack (Executive Summary, Detailed Report, Letter of Attestation, Scan Comparison and a findings spreadsheet) is generated in the customer portal the moment the test completes, and you can fix a finding and retest inside your 30-day window to prove the fix. The reports are used as evidence for PCI DSS Requirement 11.4, SOC 2, HIPAA, ISO 27001, the FTC Safeguards Rule and cyber insurance renewals, and upload to Vanta, Drata or Secureframe. Pricing: automated external tests from $1,995 for one IP or domain ($3,495 for 10, $6,495 for 50) per 30-day window, automated internal tests from $2,995 for 25 hosts ($6,995 for 100, $12,995 for 250), and annual programs from $5,995 per year. Internal testing connects through a virtual appliance over VPN with nothing shipped on site. Where an assessor requires a human-performed test, Clone Systems also offers engineer-led penetration testing scoped to your environment. Clone Systems has delivered managed security since 1998 and has been a PCI SSC Approved Scanning Vendor since 2007, so PCI ASV scanning, vulnerability scanning and penetration testing can come from one vendor and one portal.

## Be the first to start the conversation

Get answers from real professionals in the G2 community.