Pentera Blog: Pentesting, Red Teaming & Security

Lessons from the SolarWinds Supply Chain Attack

Aviv Cohen

30 Dec 2020

Source code repositories are crown-jewel assets, and a single gap can put the entire software supply chain at risk. Organizations need continuous validation of the attack paths that could lead attackers to development environments and IP.

Round B Funding: Achieving Our Vision

Arik Liberzon

09 Sep 2020

Cybersecurity is shifting from manual assessment to continuous, automated validation. The goal is simple: give organizations real proof that their defenses work against modern attacks.

CEO Insights on Round B and Beyond

Amitai Ratzon

09 Sep 2020

Security teams no longer want assumptions—they want proof. The growth of automated security validation reflects that shift, helping organizations continuously test resilience against real attacker behavior.

Best Practices for Cybersecurity Hygiene

Amitai Ratzon

08 Jun 2020

Cybersecurity is not about how many controls you deploy—it is about knowing they actually work. Continuous validation helps organizations catch the single weakness an attacker needs before it becomes a breach.

Ensuring Security Against Ransomware Threats

Aviv Cohen

01 Jun 2020

Ransomware resilience depends on whether your controls can stop the attack techniques that happen before encryption. Continuous validation helps security teams find those gaps early and reduce the chance of real disruption.

Attack Simulation vs. Ethical Hacking: A Critical Look

Amitai Ratzon

25 May 2020

Security teams are under pressure to prove resilience, not just predict it. While attack simulation has value, automated penetration testing delivers deeper validation by safely emulating real attacker behavior across the environment.

Cyber Hygiene Best Practices for Remote Work

Aviv Cohen

03 May 2020

As employees connect from unmanaged home networks, traditional perimeter defenses are no longer enough. Continuous security validation helps organizations identify the gaps created by remote access, misconfigurations, weak credentials, and endpoint risk before attackers do.

Remote Penetration Testing: How It Works & Why It Matters

Aviv Cohen

24 Mar 2020

Remote penetration testing is redefining how organizations validate security in distributed environments, replacing location-bound assessments with scalable, continuous testing. By combining the flexibility of remote delivery with the depth of automated attack emulation, security teams can uncover real exploitable risk faster and more consistently.

Securing Credential Chain of Custody

Pentera Team

13 Jan 2020

Privileged credentials are often the weakest link in security validation, especially when manual penetration testing breaks the chain of custody. By combining automated pentesting with secure credential management, organizations can continuously validate risk without exposing sensitive access or introducing new vulnerabilities.

Insights on the Future of Automated Pentesting

Amitai Ratzon

21 Nov 2019

Pentera’s growth story shows that cybersecurity innovation scales best when product-market fit, customer value, and disciplined execution come before fundraising momentum. By focusing on continuous risk validation and staying deeply aligned with customer needs, the company turned early conviction into lasting market traction.

Development of the First Automated Pentesting Platform

Pentera Team

18 Nov 2019

Pentera’s product evolution reflects a clear shift in cybersecurity from assumptions to continuous, automated validation. By building around real attack emulation, safety, and proven exploitable findings, the company helped redefine how enterprises measure security effectiveness at scale.

Enhancing Enterprise Risk Management with Automated Testing

Pentera Team

23 Oct 2019

Automated penetration testing gives Enterprise Risk Management a more practical way to validate whether security controls actually reduce business risk. By proving exploitable weaknesses, prioritizing remediation, and supporting continuous testing, it helps organizations translate cybersecurity activity into measurable risk reduction.