Metasploit, maintained by Rapid7 and headquartered in Boston, Massachusetts, is the world's most widely used penetration testing framework, with 2,000+ exploit modules and 500+ auxiliary modules as the standard tool for red team assessments and security testing.
Provider
9 results shown
Burp Suite by PortSwigger is the industry-standard web security testing toolkit, offering intercepting proxy, automated vulnerability scanning, and a rich BApp extension ecosystem covering the complete security testing workflow from manual testing to CI/CD integration.
HackerOne, founded in 2012 and headquartered in San Francisco, is the world's largest bug bounty and crowdsourced security testing platform, connecting organizations with over 1 million registered ethical hackers and security researchers, with 500K+ valid vulnerabilities reported and $300M+ in bounties paid.
Burp Suite, developed by PortSwigger in the UK in 2004, is the leading web application security testing platform offering an intercepting proxy, scanner, intruder, and extensible plugin ecosystem, the industry standard for penetration testing.
Bugcrowd, founded in 2012 and headquartered in San Francisco, USA, is a leading crowdsourced security testing and bug bounty platform connecting organizations with its rigorously vetted community of security researchers.
Founded in 1995 and headquartered in Chicago, IL, Trustwave is a globally recognized cybersecurity firm. Trustwave CA provides SSL certificate issuance deeply bundled with Managed Security Services (MSS), penetration testing, and PCI DSS compliance — issuing 500K+ SSL certificates annually.
Founded in 2000 and headquartered in Boston, Massachusetts, Rapid7 is a leader in cybersecurity data analytics and security operations. Known for the Insight platform (vulnerability management, SIEM/EDR) and the Metasploit penetration testing framework, serving 11,000+ customers globally.
OpenVAS (Greenbone) is the world's largest open source vulnerability scanner, initiated by Greenbone Networks in 2008, with over 100,000 NVT test cases providing automated vulnerability detection, compliance assessment, and penetration testing integration.
Acunetix (now part of Invicti) is a benchmark DAST (Dynamic Application Security Testing) tool for web vulnerability scanning, automatically detecting 3,000+ vulnerability types including SQL injection and XSS, with native CI/CD pipeline integration.
Article
1 results shownWebsite Penetration Testing Basics: OWASP Top 10 Vulnerability Guide
Penetration testing is essential for discovering security vulnerabilities. This article covers OWASP Top 10 vulnerability principles and fixes.