vPenTest Features
Administration (5)
-
API
Application programming interface that allows for integration with other systems/databases
-
Reporting and Analytics
Tools to visualize and analyze data.
-
Reporting
Provides results of the simulation and reveals potential security gaps or vulnerabilitites.
-
Risk Evaluation
Identifies potential network security risks, vulnerabilities, and compliance impacts of attacks and breaches.
-
Automated Testing
Automates attacks and adversarial logic for continuous testing.
Analysis (6)
-
Issue Tracking
Track issues and manage resolutions.
-
Reconnaissance
Gathers information about the system and potential exploits to be tested.
-
Vulnerability Scan
Scans applications and networks for known vulnerabilities, holes and exploits.
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Automatic Scans
Setup recurring or automatic scans
SPA Scans
Security assessments specifically designed to identify vulnerabilities in single-page web applications.
Testing (2)
-
Test Automation
Runs pre-scripted security tests without requiring manual work.
-
Performance and Reliability
Software is consistently available (uptime) and allows users to complete tasks quickly because they are not waiting for the software to respond to an action they took.
Simulation (4)
-
Test Agent Deployment
Executes attacks on a range of surfaces from email and desktop to cloud and network environments.
-
Breach Simulation
Simulates a compromized network environment resulting from neglegence, misconfiguration, or other user errors that expose sensitive information.
-
Attack Simulation
Simulates a real-world attack on networks and endpoints with the intent to harm a business.
-
Resolution Guidance
Guides users through the resolution process and give specific instructions to remedy individual occurrences.
Customization (3)
-
Multi-Vector Assessment
Allows users to simulate threats that attack multiple points of entry to infect computers and networks.
-
Scenario Customization
Allows users to create attack scenarios that mimic their real-world working enviroment.
-
Range of Attack Types
Allows for the simulation of multiple attack variants. Simulates attacks targeting different kinds of endpoints and networks.
Additional Functionality (26)
Network Mapping
Network topology maps providing infrastructure visualization for devices, connections, configurations, etc.
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
SQL Injections
Protect against code driven website security attack techniques
Audit Management
Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws
Threat Intelligence
Information to prevent, understand and identify cyber threats
Assignment Management
Assign issues and tasks based on availability or required skills
Integration Management
Identify which applications need to exchange data and enable these data connections
User Management
Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks
Asset Discovery
Remediation Management
Identify and orchestrate execution of actions needed to restore systems to optimal conditions
Vulnerability Scanning
Discover patch statuses and vulnerabilities
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Multi-User Collaboration
Two-way actions and communication between multiple users in real time
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Web-Application Security
Identify and respond to security threats to web applications
Vulnerability Assessment
The process of identifying, quantifying, and prioritizing the vulnerabilities in a system.
Security Auditing
Systematic evaluation of the security of a company's overall security system and situation
Runtime Container Security
Continuously vetting activities within the container application environment including hosts, open ports, protocols and payloads.
Network Scanning
Scanning networks to identify security threats
Password Cracking
Tools for testing the strength of passwords through brute force, dictionary attacks, or other methods.
Simulated Threat Attacks
Controlled, realistic exercises that mimic real cyber threats to test an organization/user's security measures and preparedness.
Certificates
Create and distribute custom certificates for achievements or assessments.
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Real-Time Data
Receive data and information in real time
Cross-Site Scripting
Security vulnerability that allows attackers to inject malicious scripts into web pages
Exploit Frameworks
Specialized tools and modules to exploit identified vulnerabilities in systems and applications.



