Power up Your Productivity with Pentest-Tools.com
Rating: 7 out of 10
IncentivizedUse Cases and Deployment Scope
Pentest-Tools.com is a website
that provides a range of online tools and services for pentesting, or ethical
hacking. These tools are designed to help identify and address vulnerabilities
in computer systems and networks.
In
our organization, Pentest-Tools.com is used to assess the security of the
company's systems and identify potential weaknesses that could be exploited by
malicious hackers. This helps us protect our assets and sensitive information
from cyber attacks, and also helps ensure compliance with relevant regulations
and standards. In particular, we like to utilise this product for it's website/port scanners, and it's password auditor, since these allow us to set up automated alerts when something has gone awry, giving us situational awareness at all times.
Pros
- Cheaper than some other platforms
- Good support
- Cloud based
- Integrates well with identity providers
Cons
- No logging for things like scanning. This means you don't actually know when the scan has failed if you're not immediately on the ball.
- Reports could look better. It would be good to be able to customise the report with some different styles to suit your company's branding.
- Could have better tutorials.
- It may be useful to have a feature similar to Microsoft Secure Score, which compares your organisation to similar ones, so that you have a reference of how secure your environment actually is.
Likelihood to Recommend
This website is well suited for organisations that perform regular security assessments. In particular, external scans and reconnaissance. As an example, I am able to run a report on our Wordpress website to enable me to see whether we are missing any important security updates.
We found it to be very useful for training new security analysts, due to the straightforward GUI. You can work on the same projects together to help you to do this. Having it laid out in front of them helps them to understand the concepts much easier than using dozens of different tools to achieve the same goals, and also speeds up training.
If you're a personal user it may not be appropriate due to price. If you are a personal user, I would advise using the many open source tools there are that do the same things. The strength of this platform is that it combines them into a single pane of glass, but you can achieve the same things with other tools if necessary. For example, there are many other tools that you could use to run a UDP port scan that do not cost money (EG NMAP).
We found it to be very useful for training new security analysts, due to the straightforward GUI. You can work on the same projects together to help you to do this. Having it laid out in front of them helps them to understand the concepts much easier than using dozens of different tools to achieve the same goals, and also speeds up training.
If you're a personal user it may not be appropriate due to price. If you are a personal user, I would advise using the many open source tools there are that do the same things. The strength of this platform is that it combines them into a single pane of glass, but you can achieve the same things with other tools if necessary. For example, there are many other tools that you could use to run a UDP port scan that do not cost money (EG NMAP).
Shane Muggeridge
IT Engineer in Information Technology at Onsite Technologies (11-50 employees)
Vetted Review
2 years of experience