vPenTest Reviews & Product Details

The best part of VPenTest is the intuitive and easy implementation of the assessments, so we can schedule a frequency through more than a year with a few clicks. With the detailed reports that we get, we can bring an efficient customer support and remediation road map for some of them, easily integrated with RapidFireTools and ITGlue for integrations. Review collected by and hosted on G2.com.

Sometimes the process takes a bit longer than we expected, but not by much, so the turnaround time is acceptable for such a well-detailed report. The report is very complete, with thorough information—actually more than we need. Review collected by and hosted on G2.com.

One of the standout aspects of vPenTest is how easy it is to get started. The platform is straightforward to deploy and configure, allowing organizations to begin testing quickly without extensive setup or specialized expertise. It also offers broad support for Linux distributions, cloud environments, and modern infrastructure, making it well-suited for today's hybrid IT environments.

The quality of the reporting is another major strength. Reports are detailed, professionally presented, and provide clear remediation guidance, helping technical teams prioritize and address findings efficiently. The automated testing process delivers consistent results while maintaining the depth needed to uncover meaningful security issues. Combined with its scalability and ease of use, vPenTest provides an effective way for organizations to validate their security posture on a regular basis. Review collected by and hosted on G2.com.

Report Scheduling, at the moment, there is no facilities to have recurring schedules which is quite a disappointment and introduces some extra labour. In addition to this, the many notification emails generated would not indicate which customer it was referring to, so quite cumbersome when you have a large user base using the service which in turn requires more engineering time. Review collected by and hosted on G2.com.

vPenTest has been useful for quickly identifying externally exposed weaknesses without requiring a lengthy manual assessment process for every engagement. The automated testing workflow helps provide a practical baseline view of network exposure, insecure services, and common attack paths while still producing reports that are understandable for both technical teams and customer discussions. We also like that it helps prioritize remediation efforts by surfacing issues that are realistically exploitable rather than simply generating overly broad vulnerability lists. The platform integrates well into recurring security review processes and makes it easier to maintain more consistent testing across multiple environments. Review collected by and hosted on G2.com.

Because the platform is heavily automated, some findings still require additional manual validation and context before being treated as high-confidence risks. Certain reporting sections can also feel repetitive or overly generalized depending on the environment being assessed. While the automation provides efficiency, more advanced customization and deeper investigative visibility would improve flexibility for organizations wanting highly tailored penetration testing workflows. In more complex environments, supplemental manual testing may still be necessary to fully evaluate nuanced security exposures. Review collected by and hosted on G2.com.

I have used vPenTest at a previous place of employment. Having been successfully implemented and found to have met our compliance requirements it was recommended at my current place of employment. Side-by-side comparisons were done objectively against top competitors and despite one of the competitors having a good relationship with one of our top management officials, the results were undeniable. Onboarding was done in one session. The dashboard is self-explanatory and there was no need for further customer support. Even though I used the product before in a different environment, there was initially a slight hesitancy/fear to run the penetration test with fears that it may be disruptive or break the functionality of our systems. We have a highly complex network. The penetration tests have been run for two consecutive months thus far without issues. The product's findings were easily integrated with the output of VulScan vulnerability scanning platform. The extent of the findings and the resolutions steps have been highly comprehensive. The reports generated have met the stringent requirements of our compliance body. I have no issues in recommending this platform. Review collected by and hosted on G2.com.

As the software is not agent based i.e. not installed on each system to be scanned, scans are dependent on being able to be reached from on-premises server or via VPN. As our workforce is hybrid/WFH (Work from Home), using VPNs at home and allowing dynamic IPs were not feasible. Scans can only be done while system is brought into one of our branches which are connected site to site VPN. Review collected by and hosted on G2.com.

This takes the massive job of performing a penetration test and virtually trivializes it to a few steps. The reporting and analysis you get afterwards is stellar. Review collected by and hosted on G2.com.

The initial setup was rough and took a lot to get started. We've gotten some pushback that it couldn't target everything and since it was automated, it didn't prove protection from human creativity. Review collected by and hosted on G2.com.

Easy to implement and easy to test, with a complete reporting platform. It supports a lot of parameters and the use of external IPs, and it’s pretty simple to set up. I can quickly create many cybersecurity test cases based on a list of IPs. Review collected by and hosted on G2.com.

I would like this tool. I’d also like a Linux image that’s ready to install on my client LAN, ideally a ready-to-use image that already includes the tool. In addition, I’d like reports that are ready and more specific, including personalized reports. Review collected by and hosted on G2.com.

It’s easy to manage and run on my own, with a flexible scheduling system for pen testing both internal and external devices. I also received CREST-certified reports along with the technical analysis. Review collected by and hosted on G2.com.

Reports are taking too long to receive, although I understand this is normal since they need to be analyzed before being released. Another drawback is that the scanning process also takes longer than expected. Review collected by and hosted on G2.com.

Automated pentesting with continuous scanning that’s MSP-ready and supports compliance needs. Reporting is clear, deployment is easy, and the platform scales well as requirements grow. Recurring testing delivers consistent results, helps identify vulnerabilities efficiently, and remains cost-effective overall. Review collected by and hosted on G2.com.

The testing feels limited in depth and is mostly automated, which leads to false positives. There’s no real manual testing, and the overall scope feels constrained. It also lacks customization options, the analytics are fairly basic, and exploit validation is limited. Overall, it feels less advanced than an expert-led pentest. Review collected by and hosted on G2.com.

What I like best about vPenTest is that it’s easy to use, provides clear and actionable reporting, and offers good value for the price point. I also like the monthly reset of assigned IPs for customers, which makes managing recurring testing more flexible. The support articles are helpful and make troubleshooting straightforward, and having access to the Kaseya helpdesk has also been useful when assistance is needed. Review collected by and hosted on G2.com.

One thing I dislike is that some results still need manual verification, as there can occasionally be false positives. I’d also like to see more detailed reporting customization and deeper remediation guidance for certain findings. Review collected by and hosted on G2.com.

I like that vPentest makes penetration testing feel much more accessible and repeatable without needing a full manual engagement every time. It gives clear findings and helps point you toward what actually needs fixing. Review collected by and hosted on G2.com.

One thing I dislike is that some results still need manual review to understand the real-world risk and priority. It is useful, but it is not a complete replacement for a skilled tester. Review collected by and hosted on G2.com.