Penetration testing
A pentester that
never clocks out.
The agent maps what you expose, picks the right tests, attacks like an adversary and reports only what it can prove. Exploitation happens only when you allow it.
Edge hosts
Penetration test · 3 hosts · 11 services
| Host | Service | Finding |
|---|---|---|
| 203.0.113.10 | 443 https | Medium TLS 1.0 accepted |
| 203.0.113.10 | 22 ssh | Low Password login enabled |
| 203.0.113.11 | 8443 https | High Admin console exposed |
| 203.0.113.11 | 3306 mysql | High Reachable from internet |
| 203.0.113.12 | 80 http | No issue |
CVSS 3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
What it does
- Maps your attack surfaceA port and service scan finds every exposed service. The agent then fingerprints and tests each one.
- Tests web, API and networkChecks for known vulnerabilities, TLS and web server checks, content discovery and service-specific attacks.
- Proves what it findsIn a penetration test it may use injection and credential tools to prove impact. In an assessment it never exploits.
- Covers mobile appsAndroid and iOS packages assessed against OWASP MASVS: 58 static checks on Android and 55 on iOS.
- Scales to your estateUp to 256 hosts per scan, as lists or ranges. Loopback and cloud metadata addresses are refused.
- Never hides a gapA planned check that could not run is named in the report with the reason, never counted as clean.
What you get
- Findings with the tool output behind them
- A CVSS 3.1 vector where one can be scored
- A curl command that reproduces each request-based finding
- A report that says whether it was a pentest or an assessment
Mapped to
- CVSS 3.1
- CWE
- CVE
- OWASP MASVS 2
How it works
- List the hostsHosts or ranges, an optional port, and context for the tester.
- Choose test or assessAssessment verifies without exploiting. A pentest proves impact.
- Read the proofEvery finding with its evidence, score and a way to reproduce it.
Documentation
Read the details
Setup, every option and the API, on docs.cerberon.dev.
Common questions
What is the difference between a vulnerability assessment and a penetration test?
An assessment verifies issues without exploiting them. A penetration test lets the agent exploit to prove a finding, and the report says so.
Does it test mobile apps on a device?
No. Mobile testing is static: the app package and the agent's MASVS checklist. The 21 checks that need a running device are listed as not tested, never as passed.
Does this replace a human pentester?
It covers the repeatable work all year. For an independent report, business logic depth or red teaming, our experts run the engagement.
See it on your own systems.
A 30-minute demo on your targets, or install it yourself and start scanning this afternoon.