vPenTest

vPenTest by Vonahi Security is an automated network security testing solution designed to provide on-demand risk management for small to large organizations. According to the vendor, vPenTest offers a comprehensive suite of features aimed at IT professionals, cybersecurity professionals, network administrators, technology companies, and financial institutions to ensure the security and compliance readiness of their network infrastructure.

Key Features

On-Demand Risk Management: According to the vendor, vPenTest allows users to conduct monthly security assessments in near real-time and enables full-scale network security testing with just a few clicks. It also claims to measure the effectiveness of compensating controls and minimize risk through the implementation of controls.

Compliance Readiness: The vendor states that vPenTest helps organizations meet compliance requirements with more scheduling flexibility. It provides real-time alerts for compliance monitoring and offers segmentation testing to confirm the isolation of sensitive networks. Additionally, it tests for security deficiencies that deviate from best practices.

Always be in the Know: According to the vendor, vPenTest allows users to track the progress of engagements in real-time. It provides expected completion time and preliminary findings to the IT team, ensuring transparent communication and visibility into activities throughout the testing process.

Validate Your Security Controls: The vendor claims that vPenTest's activity log monitors all activities performed during the security testing. It allows users to correlate these activities with SIEM and incident response procedures. The engagements also function as purple team assessments, helping organizations validate their security controls.

Pre- and Post-Breach Simulation: The vendor states that vPenTest enables users to perform simulations at any time within internal and external network environments. It allows for the utilization of open-source intelligence gathering for successful attacks, host discovery, enumeration of systems and services, and launching attacks against vulnerable services while attempting privilege escalation.