Pentesterra

Pentesterra is a security orchestration platform that brings vulnerability management, automated network and web pentesting, breach and attack simulation, and AI-assisted exploit verification into a continuous workflow. It combines attack-surface mapping with breach simulation and controlled exploitation, prioritizing findings around evidence. Web testing covers modern web applications, single-page applications, and APIs through public or private proxies and Tor, including authentication flows, CSRF, JWT, and WAF evasion. Safe exploit validation uses real-world tools in non-malicious modes and is described as having no malware or ransomware. Attack Chain Analysis connects web, network, and DevGuard findings into directed kill-chain graphs, with up to 20 paths at depth five or less. Deployment options include SaaS, dedicated PaaS, and fully air-gapped on-premises installations. Verified findings can generate Jira tickets, and a REST API supports scan triggers, results retrieval, and reporting automation. The free DevGuard Free plan is 0.00 EUR per free and includes one project and three scans per month. Paid plans start at 23.00 EUR per month.