Pentera Logo Pentera Logo White
resources
Jun 2026
Looks Legit, Runs Malicious: The Quiet Trust Gap in AWS SSM
The risks behind AWS Systems Manager shared documents
Read now
“Pentera helps us prioritize what truly matters and gives us confidence we are covering our global environment continuously.”
“Seeing a domain admin account cracked in production changed how we view internal exposure.”
“Pentera helped us advance our red team and continuously improve penetration testing.”
“Pentera makes it easier to focus on what is truly exploitable instead of chasing long vulnerability lists.”
“In a complex, large-scale environment, Pentera delivers the speed and visibility security teams need.”
“Pentera amplified our team’s performance and delivered measurable value to upper management.”
"Pentera allows us to tailor testing to each service, reduce time and costs, and shift our focus from simply finding vulnerabilities to actively helping our teams fix them.”

Rubén Alonso | Head of Secure
Development Unit, Telefonica

“I don’t think we’d be able to advance our red team without Pentera. If you’re looking to improve penetration testing, I would definitely recommend it.”

Owen Fuller | Cybersecurity Engineering
Manager, Casey’s

Blog
Same Field, Same Players, But the Game Has Changed
Learn more
Blog
Five Eyes warned AI will upend cybersecurity in months. The same afternoon, OpenAI showed why.
Learn more
1/3
The Enterprise Attack Surface: Analysis from 500 CISOs
Jason Mar-Tang
21 May 2025
The modern attack surface is sprawling, dynamic, distributed, and dangerously opaque. As enterprises expand into cloud-native or hybrid architectures, deploy APIs by the thousands, and integrate IoT and OT devices into core operations, the surface area for cyber threats grows both in size and complexity.
Read more
Scaling Security Validation for the Enterprise: The Vision Behind Pentera 7
Arik Liberzon
24 Apr 2025
Seeing Pentera set a new standard for Enterprise-scale security validation with the launch of Pentera 7 brings me a great deal of satisfaction as a further step towards realizing my early vision for Pentera.
Read more
Kubernetes Annotation Security Risks in AWS
Dvir Levy
24 Apr 2025
Misconfiguring just one word in Kubernetes can expose your AWS environment to the internet, putting your data and applications at serious risk. Kubernetes and AWS are essential tools for managing scalable applications, yet their complexity can sometimes lead to critical misconfigurations.
Read more
Security Research Techniques: Build Before You Break
Nir Chako
14 Apr 2025
As security researchers, we deal with some of the most complex systems out there. While our work seems purely analytical, a lot of our decisions come down to gut feelings. This intuitive side of our work is crucial and can often be the key to a breakthrough, rather than hitting...
Read more
Pentera API Security Automation: Advanced Cybersecurity Use Cases
Stefan Jansson
01 Apr 2025
If you’re looking for ways to automate and streamline your security validation operations, the Pentera API is a powerful tool to have in your arsenal. With capabilities that range from real-time visibility into validation testing operations and findings to seamless integration with automated workflows, the Pentera API is all about...
Read more
Security Validation ROI: Justifying Cyber Investments
Pentera Team
26 Mar 2025
In a recent feature on The Hacker News, Shawn Baird, Associate Director of Offensive Security & Red Teaming at DTCC, shared how he successfully communicated the Security Validation ROI to senior management and secured funding for an automated security testing platform. As security budgets expand, organizations are under increasing pressure...
Read more
CVE-2024-47176 – Linux Privilege Escalation via CUPS Vulnerability
Pentera Team
26 Feb 2025
A privilege escalation vulnerability in the Common UNIX Printing System (CUPS) affects the cups-browsed service, a helper for the main CUPS service. Attackers can exploit this flaw by crafting malicious packets targeting the exposed cups-browsed service on port 631/UDP. This can trigger the service to connect back to the attacker,...
Read more
Deciphering the Risks of AWS SSM in Hybrid Environments
Pentera Team
06 Jan 2025
In our latest research, we explore how AWS SSM, a tool designed for streamlined host administration, can be exploited by attackers.
Read more
Ransomware Insider Threats: Understanding the Growing Danger
Assaf Regev
02 Jan 2025
Insider-enabled ransomware is dangerous because it weaponizes legitimate access and bypasses traditional defenses. Organizations need continuous validation to know whether their controls can actually stop ransomware from within. Resilience comes from testing often, fixing gaps fast, and treating ransomware readiness as an ongoing practice.
Read more
From Compliance to Confidence: Achieving CMMC 2.0 Certification
Jason Mar-Tang
24 Dec 2024
CMMC is about proving security, not just documenting it. Many contractors struggle to show their controls work in practice. Continuous validation helps close that gap.
Read more
Continuous Ransomware Validation: Why Annual Testing Is No Longer Enough
Jason Mar-Tang
17 Dec 2024
RaaS has made ransomware faster to launch, harder to predict, and far more scalable for attackers. That means organizations can’t rely on annual testing or backups alone. Continuous validation is what turns ransomware readiness into something real.
Read more
What is BAS 2.0 and Why You Need It
Michal Brenner
03 Dec 2024
Traditional BAS validates expected scenarios, but modern attackers do not follow playbooks. BAS 2.0 closes that gap by continuously emulating real attack behavior across the environment and prioritizing exposures based on actual impact. That shift gives security teams clearer validation, sharper remediation, and far less operational friction.
Read more