Pentera

This article contains content that is written like an advertisement. Please help improve it by removing promotional content and inappropriate external links, and by adding encyclopedic content written from a neutral point of view. (February 2024) (Learn how and when to remove this message)

Pentera is a

• Seed funding — Since its incorporation and by 2018, the company raised the total amount of $5 million.^[5][6]
• Series A — In November 2019, $10 million were raised from AWZ Ventures and Blackstone Group.^[5]
• Series B – In September 2020, $25 million^[7] were raised from Insight Partners, AWZ Ventures, and Blackstone Group.^[6][8][9]
• Series C – In January 2022, Pentera became a unicorn raising $150 million, out of which $75 million in primary, from K1 Investment Management, Evolution Equity Partners, and Insight Partners. This funding round brought Pentera's valuation to $1 billion.^[10][11]

Product

Pentera develops security validation software designed to test cybersecurity controls, credentials, and vulnerabilities within organizations. The platform is designed to assist in identifying and prioritizing security flaws to increase an organization's resilience to cyberattacks.^[12][13][14]

The Pentera software employs algorithms to test both internal and external network attack surfaces, as well as cloud-based systems. The platform is designed to perform automated emulation of ethical attack techniques such as remote code execution, password cracking, and data exfiltration. The platform does not require the installation of software agents on the network’s endpoints, making it compatible with most enterprise systems and security service providers.^[15]

The Pentera platform consists of products and add-on modules:

• Pentera Core Product — maps, tests and validates the security control of the organization’s internal network.^[16][17]

• Pentera Surface Product — maps, tests and validates the security control of the organization’s external network.^[18]

• Pentera RansomwareReady Module — validates the organization’s defenses against the latest known ransomware attacks.^[19][20]

• Pentera Credentials Exposure Module — leverages data of real-world leaked credentials sources to identify threats to organizational internal and external attack surfaces.^[21][22]

Research

Pentera Labs is the company's research arm, which actively monitors threat intelligence feeds and identifies new vulnerabilities and attack techniques used by adversaries. Its publications are available for cyber defenders to identify, analyze, emulate, and mitigate new adversary tactics and techniques in the wild.^[23]

These findings are synthesized and fed into the Pentera platform to continually enhance its security testing capabilities. Pentera labs also disclosed newly discovered "

• Zero-Day Vulnerabilities – In March 2022, the Pentera Labs team discovered two zero-day vulnerabilities, CVE-2022-22948 and CVE-2021-22015. They exposed weakness in VMware vCenter managed environments in over 500,000 organizations globally. The vulnerabilities were reported to VMware by Senior Security Researcher Yuval Lazar which resulted in a corrective VMware patch.^[25]
• "135 is the new 445" – In September 2022, the Pentera Labs team developed an implementation of the Sysinternals PsExec utility that allows moving laterally in a network using the less monitored port, Windows TCP port 135.^[26]
• "Who Stole My Cookies? XSS Vulnerability in Microsoft Azure Functions" – In January 2023, the Pentera Labs team found a web
  Microsoft Azure Functions, which was patched by Microsoft after their report.^[27]