Coalfire vs Vonahi Security

About Vonahi Security

Vonahi Security sells vPenTest, an automated network penetration testing SaaS platform. vPenTest is a scripted network penetration testing platform that runs the exact same steps and processes performed by a security consultant doing a live pentest. vPenTest is a full-scale penetration testing platform that incorporates the knowledge, methodologies, techniques and commonly used tools of multiple consultants into a single platform. vPenTest covers host discovery, service enumeration, vulnerability analysis, exploitation, post-exploitation, privilege escalation and lateral movement, as well as documentation and reporting.^[3]

Vonahi Security describes traditional security assessment as outsourced consultants providing manual testing, mostly as a once a year test.^[6]

With vPenTest, a customer deploys an agent, schedules an internal assessment and receives detailed reports within a few days. Customers of vPenTest control the schedule, frequency and scope of every assessment. vPenTest lets a customer schedule an internal or external network penetration test anytime it is needed. vPenTest can perform pre- and post-breach simulations at any time within both the internal and external network environments. vPenTest generates a report for the customer and its team to review within 48 hours after the penetration test is complete. vPenTest reports show trending data, which lets a team see improvements from one month to another.^[7][9]

Host discovery in vPenTest covers systems and services within the targeted environment, including active systems and port scanning. vPenTest enumerates services and systems to identify potentially valuable information, including vulnerability analysis. vPenTest launches attacks against vulnerable services, including password-based attacks, man-in-the-middle attacks, relay attacks and more. After gaining an initial foothold on a system, vPenTest automatically attempts to launch privilege escalation attacks.

Network teams can correlate vPenTest activities with their SIEM and incident response procedures. vPenTest has a progress tracker that shows the IT team the progress of the engagement, when it is expected to be completed and any preliminary findings. Vonahi Security provides flexibility in schedule, alerting and real-time activity tracking, and segmentation testing to confirm isolation of sensitive networks. Vonahi Security performs penetration testing against a network environment and compares its activities with the customer's monitoring and alerting controls, so the organization can assess its technical security controls against malicious attackers from multiple perspectives.^[3][4]

Vonahi Security positions vPenTest for MSPs that offer network penetration testing to SMB clients. Vonahi Security also positions vPenTest for internal IT teams that evaluate cybersecurity risks in real-time.^[3][8]

Stratus ip is a provider of telecommunications and managed services for businesses of all sizes, and Stratus ip switched to vPenTest's automated network pentesting solution. Clients of Stratus ip now conduct tests quarterly rather than just once a year. Netcotech is based in Edmonton, Alberta and offers managed and professional IT services, and Netcotech uses vPenTest for internal and external network pentesting. Insurwave, an insurance e-trading platform, shifted to a monthly network penetration testing model with vPenTest. Greene County General Hospital adopted vPenTest. W-Industries used vPenTest to meet the penetration testing requirements of its cyber insurance. Port53 uses vPenTest in its penetration testing services, and AvTek Solutions uses vPenTest in its security services.^[7][10][12]

Vonahi Security is CREST accredited in both EMEA and Australasia. MSP partners and customers can receive a CREST-certified network penetration test report from vPenTest across Europe, the Middle East, Africa and Australasia. CREST is an international non-profit organization that certifies and accredits cybersecurity companies.^[2][4][7][9]