Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
14 Days Trail - Great Findings!!
What do you like best about the product?
Subdomain Enumeration with Server and Page details -- helpful for subdomain takeover.
What do you dislike about the product?
It cannot differentiate properly between a page redirection and a directory -- sometimes give false positive. The team should work on reduce false positive detection and improve on other detection methods (OWASP Top 10), PCI-DSS, HIPAA etc.
What problems is the product solving and how is that benefiting you?
I found two RCE on subdomains via WordPress Installation. I mainly used it for Recon as it provides web-based scan reports which reduced my time unless I have to use multiple custom tools to get similar results. On another scan, I was able to find publicly exposed configuration, credentials files available on our website.
- Leave a Comment |
- Mark review as helpful
A Must for All Bug Bounty Hunters
What do you like best about the product?
As a bug hunter there are a lot of moving parts that need to be organized in order to keep the focus straight on bug hunting. Pentest tools take care of that. From Directory listing to web pentest like SQLi, XXS scanning, etc to standard TCP scans of various software like WordPress, Joomla, etc. I only had 12 days of trial but I used the platform completely and wished to had more time as it made my entire engagement for the client simple and without worries. Best part? Its on the cloud so I can schedule a scan and then walk away without worrying about the VM crashing or using too much hardware. Totally worth it.
What do you dislike about the product?
At this moment nothing as I had such less time exploring it. But I dont think there is anything to dislike. I would surely like to see a student subscription for $10/month or so that more people can start engaging in this platform.
What problems is the product solving and how is that benefiting you?
Problems which we have in pen testing:
1) Disorganized environment during engagement - too many moving parts.
2) Hardware to support the engagement - sometimes can be resource-intensive
3) Lack of knowledge of what tools to use.
Solution by pentest-tools.com
1) Having a clean environment for engagement
2) Everything is on the cloud with pentest robot and automation which simply makes things easier to handle on the hardware.
3) All the tools are available to the disposal, just a small introduction and everything becomes intuitive.
1) Disorganized environment during engagement - too many moving parts.
2) Hardware to support the engagement - sometimes can be resource-intensive
3) Lack of knowledge of what tools to use.
Solution by pentest-tools.com
1) Having a clean environment for engagement
2) Everything is on the cloud with pentest robot and automation which simply makes things easier to handle on the hardware.
3) All the tools are available to the disposal, just a small introduction and everything becomes intuitive.
7 Day Trial - Awesome
What do you like best about the product?
The user interface is set up really cleanly. The availability of workspaces and the ease with which you can tailor the scans for each workspace is awesome. We were testing a new software product that we are taking to market - there are three dimensions that we needed to test: Administration Workspace (Web Application), API and our internal AWS network. Being able to segregate the testing into three workspaces allowed us to easily analyze the results. The reports were OK, some of the grouping was less optimal but took a fraction of the time it used to prepare reports.
What do you dislike about the product?
There was no report to get an overview of the comments that were entered when updating the status of an issue. For example we put comments in some of the issues we marked as ignore but the only way we could review those comments was to click on the history of each vuneralbility. I would have been awesome to put comments in the "Fixed" items and share them with clients, or to enter a justification for a False Positive that could be shared with the client.
What problems is the product solving and how is that benefiting you?
Cost effective pentesting was the goal. We need to be constantly scanning our systems as we add clients and enhance the software. We simply could not afford to outsource this activity. We are now very confident that we will pass client mandated pentesting without any issues. The benefit is the peace of mind.
Recommendations to others considering the product:
I checked out the customer references and they all checked out. I was a little nervous that my data was leaving the US but it seems to be ligit.
Great set of tools for vulnerability testing
What do you like best about the product?
We have been a long time user of Pentest-Tools. It is quick, powerful set of tools that allow us to scan for vulnerabilities. The straight forward results with citations for the vulnerability makes it easy to mitigate any weaknesses found. The product is continuously being improved and new features are being rolled-out. That gives us confidence that vulnerability definitions are up-to-date and the latest scanning technology is being used. The disposition of the findings and reporting tools provides great control over reports. Given the number of scans and URLs we have, Pentest-Tools is a great value.
What do you dislike about the product?
The vulnerability definitions can change at any time and there is no way to control it. We have run scans; developed a fix and got a clean scan; then after we roll out the fix, we rescan and can't get a clean scan because the definitions have changed. The clean scan is needed so we can close out the first scan within time requirements. Having a fixed update schedule, the definition file revision level in the reports, or ability to chose which definition file is used would be helpful.
What problems is the product solving and how is that benefiting you?
We are a SaaS provider running our software on the Azure platform. Pentest-Tools has allowed to automatically scan our deployments for vulnerabilities on a regular basis, keeping our customers protected. The continuous upgrades to the product suite gives us confidence that the latest vulnerabilities are being identified, so we can mitigate them promptly.
Strong set of tools that are regularly updated and strengthened
What do you like best about the product?
Being able to schedule tests, including validated user accounts, to a number of sites. We also very much appreciate the added tools such as port scanning, server scanning, etc.
What do you dislike about the product?
It's already quite expensive, so limiting an account to one login at all but the most expensive tier seems a bit mean. As company director I want the account in my name, and to have a login for overview, but I have staff who I want to be in charge of the pentesting. I have to get them to use my login.
What problems is the product solving and how is that benefiting you?
We already conduct our own pentests internally with our own tools, but we have contractual requirements to have external testing carried out too. This satisfies this requirement, without having to pay huge sums to agencies to press a button on their own test systems. Pentest-tools is more transparent too.
Very good tool for our work!
What do you like best about the product?
We use this tool to scan our customers' websites. We particularly like that we can subscribe the tool on a monthly basis. The simple operation makes it easier for us to design our work professionally. The results of the scan are very good. PENTEST-TOOLS is a reliable partner for us. We are very satisfied.
What do you dislike about the product?
The White-Label solutions is very expensive for us. It would be nice if there was an extension for white label solutions only
What problems is the product solving and how is that benefiting you?
Advantage: You can find your way around the tool very quickly and it is easy to use.
Recommendations to others considering the product:
Use it and you will learn to love it!
The tool is very flexible, it can be used in various way. The outcome of the tests is very useful.
What do you like best about the product?
The clear report and multi scanners to select from.
What do you dislike about the product?
I am missing more business explanation what exactly the scanner is doing and what are the tools used inside the scanner.
What problems is the product solving and how is that benefiting you?
I am making sure that the websites which we are creating are properly secured.
Recommendations to others considering the product:
Just try it.
User Friendly
What do you like best about the product?
Pentest is the most user-friendly tool for security audits, The report is also given in clearly.
What do you dislike about the product?
some time the scanning stoped or hanged, we are not able to restart it we cancel and delete the scan
What problems is the product solving and how is that benefiting you?
we can fix the major issues in our server as well as websitete
Recommendations to others considering the product:
User-friendly, easy to access the software
Smart and reliable Pentest Lab
What do you like best about the product?
Handsome GUI, fully utility and all what you may need to undertake vulnerability scans and pen tests on demand. Scanning based in the EU.
What do you dislike about the product?
nothing to report about support or quality
What problems is the product solving and how is that benefiting you?
Setting up a full featured and uptodate pentest lab on demand.
Recommendations to others considering the product:
Request a demo
Great compliment to my toolbox! Easy to use.
What do you like best about the product?
Being cloud-based, you can get to the tools from anywhere without lugging around a dedicated device. THe ability to generate and customize reports is very helpful.
What do you dislike about the product?
Like any product there are some limitations. While the provider is trying to make internal scans easier with VPN and a VM setup, not sure another way to make this easier/quicker than as currently implemented.
What problems is the product solving and how is that benefiting you?
Excellent with reconnaissance info, external scans. The scans run quickly and the dashboard is easy to use. I like the attack surface feature. Organizing your scans and data is very simple to follow.
Recommendations to others considering the product:
Many of the functions are available via open-source offerings, but the GUI and cloud-based positioning can really speed up various types of scans and reconnaissance. This can be a very affordable option .
showing 71 - 80