Pentest-Tools.com Reviews & Product Details

Wir überwachen mehrere Server (Debian, ubuntu) auf Netzwerk- und Anwendungsebene. Die Ergebnisse sind schnell verfügbar, präzise und helfen uns, unser Sicherheitsniveau auf einem hohen Level zu halten. Insbesondere im Zuge der laufenden Zertifizierung nach BSI IT-Grundschutz waren die Reports sehr hilfreich. Die Verlinkung von externen Knowledge-Bases bei den Findings sorgt für eine schnelle Verifizierung und weiteres Hintergrundwissen. Der verhältnismäßig niedrige Preis macht das Angebot auch für kleine Unternehmen bezahlbar. Der Support antwortet schnell, als ich ein False-Positive gemeldet habe. Review collected by and hosted on G2.com.

Leider kann man Assets (also z.B. eine IP-Adresse) jetzt nicht mehr innerhalb eines Monats durch eine andere ersetzen (bzw. wenn schon ein Scan stattgefunden hat). Ich verstehe es, weil man dadurch das Limit durch Löschen und neu hinzufügen leicht umgehen kann. Dennoch etwas ärgerlich für mich, weil ich eigentlich gerne 6 Ziele überwachen würde. Review collected by and hosted on G2.com.

Pentest-Tools.com is a cloud-based toolkit for offensive security testing, focused on web applications and network penetration testing. The platform streamlines the use of 20+ tools that cover everything from recon, vulnerability scanning, and exploit tools through an easy to use, intuitive user interface that anyone with any level of cybersecurity experience can pick up and begin integrating into their operations immediately. That would be my favorite aspect of the platform, its ease of use. Review collected by and hosted on G2.com.

Something I didn't like is that without notification, Pentest-Tools modified their "scanned asset" plan limitation, which previously enabled teams to rotate assets as needed to remain under the limit of 500 total assets being managed on the platform, now the limit of total assets appears to be 10,000, which is great, however only under the "Teams" plan, only 500 "new" assets may be added per billing cycle, which could be limiting to teams that begin new engagements that will far exceed the 500 asset limit.

Despite the frustration of this change taking place without notification, Pentest-tools customer support was incredibly responsive and accommodating when we reached out with our concerns, and overall our experience with the pentest-tools support team has been fantastic. Review collected by and hosted on G2.com.

We recently started using PenTest-Tools for our vulnerability scanning. This tool combines multiple scanning capabilities into a single platform, allowing us to centralize our vulnerability management process. By consolidating various tools into one, it has become much easier to manage and monitor the overall picture of our vulnerability management efforts. Additionally, PenTest-Tools offers an integration feature with JIRA, which helps us address findings more efficiently. The configuration of the tool is simple and straightforward, and the support team is also very good at providing prompt feedback and solutions. Review collected by and hosted on G2.com.

As just started to sue it, couldn't find any drawbacks for now. Review collected by and hosted on G2.com.

Pentest tools provides a wide array of automated white-hat hacking tests, for all kinds of exploits. VPN setup to test inside your environment is pretty easy, and stable. It provides us with a very good overview of any internal or exposed vulernabilties, and allows us to close those holes before a hackker finds them. We run pentest tools the first weekend after every site update/upgrade just to be certain all is well.

Their Support is also very good. I have had to use them a couple of times, and they prioritize issues well, and get to a good resolutions quickly, without a lot of the "please try these common things" time wasting approach. Review collected by and hosted on G2.com.

Very few downsides. Internal scans can impact your servers performance, so we attempt to schedule these during low usage periods. Otherwise I cannot find many faults. Review collected by and hosted on G2.com.

Pentest-Tools makes it easy to perform security assessments of web applications with virtually no setup or infrastructure requirements. They also provide a variety of tools for OSINT gathering and attack surface mapping to help make sure that you're giving customers good coverage of their public-facing attack surface. Review collected by and hosted on G2.com.

Their assessment capability for SPA (single page applications) is relatively new so results with modern SPA applications can be hit-or-miss. Also, they do support scanning behind authentication, but they designed it to be very simple and user friendly. For many HTML-based login forms this works fine, and they do allow you to provide cookies or headers to use for other cases but if those don't work, they don't provide much in the way of logging or other tools for customizing the authentication workflow in order to troubleshoot and get it working. Their tech support team has helped in most cases that I've had trouble with, but resolution time may vary if their 'first line of support' can't figure it out. Review collected by and hosted on G2.com.

I like that this site allows me to do PenTesting of all my websites and get information pretty quickly, which would typically take multiple hours to get using manual scans and other pen-testing tools. I could soon get a detailed view of the current attack surface of my company's websites and could quickly tell what was exposed to the internet. Not only was it able to find vulnerabilities, but it also guided remediation. This is an excellent addition to anyone's cybersecurity toolbox!

This tool provided such good information that it quickly became a part of my weekly cyber scans. I could quickly implement it into my daily schedule and use the scans to supplement my other cybersecurity tools with an easy integration. Review collected by and hosted on G2.com.

The only thing I dislike is that I wish I could have had more websites available for the free version; maybe instead of limiting the website, limit functionality, as I think it would have given me more reasons to get the paid version! Review collected by and hosted on G2.com.

Pentesting is a bit of a dark art for me. It seems there are sharks out there, sending emails about non-existent exploits that verge in Blackmail. But I know that i need to protect our systems and I also have found that as we start to deal with larger companies, they need to see a systematized system for checking for vulnerabilities. Pentest seems to be ideal for this... either for one off tests, or for setting up regular screening. The PDF reports seem to do the job of demonstrating that a system is in place. Review collected by and hosted on G2.com.

I wish I understood what the reports actually said! But luckily, I can just rely on the traffic light system - so I only need to react quickly to red problems. Yellow problems need looking at, but not necessarily in the next 24 hours! Review collected by and hosted on G2.com.

The Vulnerability assessment tool use lot of database to identify vulnerabilities with ease and the sniper tool is just one of the best tool to automate the exploitation process making our penetration testing project easy. The auto generated report provide detail overwiew of the client netwok making it easy to understand the weakness and recommendation to stregthen the security. Review collected by and hosted on G2.com.

The tool is great and the support is amazing nothing i can complain of as for now Review collected by and hosted on G2.com.

It has a very easy-to-navigate menu with great tools that can be configured. The tools are designed in a few categories. A deep scan is impressive and can take even a few hours to complete. Reports are generated in informative and clear formats that can be explained even to non-IT persons. I had a few problems with the tool. The customer support was very quick and helped me solve the issue. Review collected by and hosted on G2.com.

I would like real-time logs to see where the scan is and display any errors. Selenium recording did not play every time. Review collected by and hosted on G2.com.

Ease of scope , organise workspaces , time efficiency , easy reporting , grouping of targets and threat analysis . All links for CVEs are there and pentest made easy. Great features to help you and compliment your manual pentetest, either is black box or gray box Review collected by and hosted on G2.com.

Nothing to dislike here , what pentest-tools is doing is value for money, all I want to see more is to add more exploits. Other than that great job guys ! Review collected by and hosted on G2.com.