Why the Pen Test Needs an Update

SANS took a look at Horizon3.ai's NodeZero, a continuous, autonomous penetration testing platform offered in a SaaS format. This new technology may help provide automated attack modeling and more consistent, repeatable pen tests that mimic real-world attack techniques.

By

Dave Shackleford

March 15, 2022

Login to download

I consent that SANS may provide my contact information to a third-party sponsor of this white paper, and that the sponsor may contact me to describe their goods and services related to this white paper.

By providing this information, you agree to the processing of your personal data by SANS as described in our Privacy Policy.

All papers are copyrighted. No re-posting of papers is permitted

Sponsored By

Related Webcast

Why the Pen Test Needs an Update

Pen tests have their issues. Not only are they point-in-time but they’re also manual. Vuln scanners are noisy and they require a lot of work.

Related Content

SANS_-_Blog_-_The_Vulnerability_Assessment_Framework_-_340x340_Thumb.jpg

Penetration Testing and Red Teaming

The Vulnerability Assessment Framework: Stop Inefficient Patching Now and Transform Your Vulnerability Management

Vulnerabilities don’t matter! Patching is terrible! Prove me wrong!

Matthew Toussain

Purple Teaming and Threat-Informed Detection Engineering

In the first two webcasts of this Purple Team series, we covered how to run your first Purple Team Exercise and how to Operationalize your Purple Team. You may have noticed that a common process in Purple Teaming is detection engineering. In this blog, we go into the items discussed in our third...

Jorge Orchilles

Security Management, Legal, and Audit, Penetration Testing and Red Teaming

Vulnerability Management Resources

Stay current with free resources focused on vulnerability management.

SANS Cybersecurity Leadership