On the recordRead 8 Oct 202619 facts
PENTRA
On the record
- Agent requirement
- The network module uses a Windows agent on a customer-provided initial-access machine; the web, mobile, API, and Purple modules run from the C2 server.pentrasecurity.io · read 8 Oct 2026
- Availability
- The site says engagements are supported internationally, with remote delivery available across all regions.pentrasecurity.io · read 8 Oct 2026
- Coverage
- The platform covers internal network and Active Directory, web applications, mobile applications, and APIs.pentrasecurity.io · read 8 Oct 2026
- Deployment
- PENTRA is deployed on-premises, requires no cloud connectivity, and is described as fully air-gappable.pentrasecurity.io · read 8 Oct 2026
- Framework mappings
- Reports cross-reference findings to NIST, PCI-DSS, and ISO 27001 controls.pentrasecurity.io · read 8 Oct 2026
- Frameworks
- The platform aligns network testing with MITRE ATT&CK, application testing with OWASP, and reports findings against NIST, PCI-DSS, and ISO 27001 controls.pentrasecurity.io · read 8 Oct 2026
- Human validation
- An engineer confirms exploitability, affected objects, severity, and evidence before a finding is recorded.pentrasecurity.io · read 8 Oct 2026
- Intended users
- The platform describes use by CISOs, SOC managers, pentesters and red teams, GRC and compliance teams, and CTOs or CIOs.pentrasecurity.io · read 8 Oct 2026
- Managed service
- Reacts offers PENTRA as a fully managed penetration testing service as well as a platform for internal teams.pentrasecurity.io · read 8 Oct 2026
- Network agent
- The Network module requires an agent on a customer-provided Windows machine; the Web, Mobile, API, and Purple modules run from the C2 server directly.pentrasecurity.io · read 8 Oct 2026
- Purple Team
- PT++ supports simultaneous Red Team execution and Blue Team detection validation in the same engagement.pentrasecurity.io · read 8 Oct 2026
- Purpose
- PENTRA is a penetration testing and vulnerability management platform that executes MITRE ATT&CK techniques and OWASP test cases at the individual technique level.pentrasecurity.io · read 8 Oct 2026
- Remediation
- PENTRA tracks findings through mitigation and retesting, recording new evidence when an engineer checks whether a fix worked.pentrasecurity.io · read 8 Oct 2026
- Reports
- The platform generates PDF and Microsoft Word reports with executive summaries, security and detection metrics, evidence screenshots, and framework mappings.pentrasecurity.io · read 8 Oct 2026
- Scope tracking
- Its Open Points tracker requires in-scope techniques to be executed and validated before an engagement can close.pentrasecurity.io · read 8 Oct 2026
- Security controls
- Agent-to-server communication is TLS-encrypted, each agent has a unique certificate, and execution output is stored in private, non-web-accessible storage.pentrasecurity.io · read 8 Oct 2026
- Support and delivery
- Reacts offers fully managed penetration testing delivered by certified security engineers using PENTRA, with international and remote engagement availability.pentrasecurity.io · read 8 Oct 2026
- Threat research
- The PENTRA Security Lab develops attack content including updated MITRE ATT&CK techniques, OWASP test cases, AI-generated payloads, and detection use cases.pentrasecurity.io · read 8 Oct 2026
