One of the standout aspects of vPenTest is how easy it is to get started. The platform is straightforward to deploy and configure, allowing organizations to begin testing quickly without extensive setup or specialized expertise. It also offers broad support for Linux distributions, cloud environments, and modern infrastructure, making it well-suited for today's hybrid IT environments.

The quality of the reporting is another major strength. Reports are detailed, professionally presented, and provide clear remediation guidance, helping technical teams prioritize and address findings efficiently. The automated testing process delivers consistent results while maintaining the depth needed to uncover meaningful security issues. Combined with its scalability and ease of use, vPenTest provides an effective way for organizations to validate their security posture on a regular basis. Review collected by and hosted on G2.com.

Report Scheduling, at the moment, there is no facilities to have recurring schedules which is quite a disappointment and introduces some extra labour. In addition to this, the many notification emails generated would not indicate which customer it was referring to, so quite cumbersome when you have a large user base using the service which in turn requires more engineering time. Review collected by and hosted on G2.com.

vPenTest has been useful for quickly identifying externally exposed weaknesses without requiring a lengthy manual assessment process for every engagement. The automated testing workflow helps provide a practical baseline view of network exposure, insecure services, and common attack paths while still producing reports that are understandable for both technical teams and customer discussions. We also like that it helps prioritize remediation efforts by surfacing issues that are realistically exploitable rather than simply generating overly broad vulnerability lists. The platform integrates well into recurring security review processes and makes it easier to maintain more consistent testing across multiple environments. Review collected by and hosted on G2.com.

Because the platform is heavily automated, some findings still require additional manual validation and context before being treated as high-confidence risks. Certain reporting sections can also feel repetitive or overly generalized depending on the environment being assessed. While the automation provides efficiency, more advanced customization and deeper investigative visibility would improve flexibility for organizations wanting highly tailored penetration testing workflows. In more complex environments, supplemental manual testing may still be necessary to fully evaluate nuanced security exposures. Review collected by and hosted on G2.com.

It’s easy to manage and run on my own, with a flexible scheduling system for pen testing both internal and external devices. I also received CREST-certified reports along with the technical analysis. Review collected by and hosted on G2.com.

Reports are taking too long to receive, although I understand this is normal since they need to be analyzed before being released. Another drawback is that the scanning process also takes longer than expected. Review collected by and hosted on G2.com.

Automated pentesting with continuous scanning that’s MSP-ready and supports compliance needs. Reporting is clear, deployment is easy, and the platform scales well as requirements grow. Recurring testing delivers consistent results, helps identify vulnerabilities efficiently, and remains cost-effective overall. Review collected by and hosted on G2.com.

The testing feels limited in depth and is mostly automated, which leads to false positives. There’s no real manual testing, and the overall scope feels constrained. It also lacks customization options, the analytics are fairly basic, and exploit validation is limited. Overall, it feels less advanced than an expert-led pentest. Review collected by and hosted on G2.com.

What I like best about vPenTest is that it’s easy to use, provides clear and actionable reporting, and offers good value for the price point. I also like the monthly reset of assigned IPs for customers, which makes managing recurring testing more flexible. The support articles are helpful and make troubleshooting straightforward, and having access to the Kaseya helpdesk has also been useful when assistance is needed. Review collected by and hosted on G2.com.

One thing I dislike is that some results still need manual verification, as there can occasionally be false positives. I’d also like to see more detailed reporting customization and deeper remediation guidance for certain findings. Review collected by and hosted on G2.com.

I like that vPentest makes penetration testing feel much more accessible and repeatable without needing a full manual engagement every time. It gives clear findings and helps point you toward what actually needs fixing. Review collected by and hosted on G2.com.

One thing I dislike is that some results still need manual review to understand the real-world risk and priority. It is useful, but it is not a complete replacement for a skilled tester. Review collected by and hosted on G2.com.

vPenTest is a phenomenal solution. It is really simple to onboard and also really easy to manage and maintain. We are now able to provide CREST Approved Penetration tests to our SMB clients at an affordable price on a regular cadence. The customer portal means they can track progress over time and see how their estate is performing from a cyber compliance stand point. Review collected by and hosted on G2.com.

vPenTest is a great tool it is difficult to identify any areas that could be improved. As well as the External Penetration testing there is an internal Scan within the tool which is incredibly detailed. It's consistent, it's clear. Review collected by and hosted on G2.com.

Our experience with vPenTest is still in the early stages since we’ve only recently completed onboarding, but the implementation process was straightforward and well supported throughout. So far, the platform seems easy to use and offers an efficient way to run regular security testing without the complexity that often comes with traditional penetration testing engagements. The onboarding team was responsive and helpful, which made it simple to get started and clearly understand the value of the solution. Review collected by and hosted on G2.com.

Since we’re still early in our adoption of vPenTest, it’s hard to point to any meaningful drawbacks at this stage. So far, most of our experience has been focused on onboarding and the initial setup, and that process has been positive. As we spend more time using the platform, we’ll develop a clearer view of its full capabilities and whether there are any areas where additional features or improved reporting would be helpful. Review collected by and hosted on G2.com.

Fantastically simplifies very complex operations and produces quality reporting that you don't need to be technical to understand. In 35 years in this industry I have never received such high quality support as I do from Vonahi. Review collected by and hosted on G2.com.

Difficult to complain about this solution as it is quite mature now and adds new features all the time. If I were to find something, it would be the ability to cap a clients IP usage, as I prefer to not to hit them with surprises, and secondly the scheduler only allows 12 months infront, it would be nice to be able to set and forget. Review collected by and hosted on G2.com.

What I find most helpful about vPenTest is how it transforms penetration testing from a slow, manual, specialist-heavy effort into a continuous security validation platform that’s easy for the business to understand and act on. Review collected by and hosted on G2.com.

The least helpful aspects of vPenTest tend to show up at the edges of what automation can realistically cover. It’s very strong for scalable validation and attacker simulation, but it’s weaker in areas that depend on deep human intuition, creativity, or business-specific context. Review collected by and hosted on G2.com.