Core Impact Penetration testing software to discover and safely exploit security weaknesses.

Key Features

Intuitive automation for deploying advanced level tests Extensive and reliable library of verified exploits Ability to test multiple vectors Group capabilities in a shared workspace Appropriate reporting to create corrective plans Powerful integration with other pen testing tools and over 20 vulnerability scanners Strong safety features, including fully encrypted and self-destructing agent Core Impact uses the same techniques that today’s threat actors use for it Effectively test IT infrastructure security to help minimize risk and protect valuable assets.
With the help of guided automation, organizations can discover, test and report in just a few simple steps Simple enough for your first test, powerful enough for the rest Core Impact Rapid Penetration Tests (RPT) are visual wizards that enable testers to quickly perform penetration tests. Users can perform common tasks efficiently and save time while providing a consistent and repeatable process for their test infrastructure. In addition, Core Impact allows you to quickly retest systems in operation to confirm that corrective actions or compensatory controls are effective and efficient.

Leverage a robust library of Core Certified Exploits
Using an up-to-date library of commercial-grade exploits, developed and tested by Core Security’s own cybersecurity experts, Core Impact shows how a chain of exploitable vulnerabilities can open up avenues for you. In addition to internally written exploits, Core Security partners with ExCraft Labs to provide add-on packages for SCADA, medical, and IoT exploits, in addition to the standard exploits available in Core Impact.
Centralize your Pen Test toolkit and maximize test visibility
Gather information, operate systems, and generate reports, all in one place. 

Each step of the penetration testing process can be executed and managed from a single console with an intuitive dashboard. Instead of switching between tools, additional solutions can also be integrated or included to further expand your testing program, such as Cobalt Strike, Metasploit, PowerShell Empire, and Plextrac. This focus not only simplifies the testing process and eliminates the need for manual document collection, but also makes reporting more consistent and efficient.
For those who prefer a more visual experience, users can enjoy Core Impact’s interactive attack map as their central workspace. This network diagram view shows a real-time overview of attack chains, rotations, and any other activity that occurred during testing, providing visual insight that allows security teams to determine the best path forward in engagement. 

Determine the test.
Core Impact provides a variety of testing functions in orderv to provide complete security coverage and insight so organizations know who, how and what is vulnerable in their IT environments.
Proof of compliance with industry regulations

Numerous regulations require organizations to conduct regular assessments of their security infrastructure to ensure that sensitive data is properly protected. Core Impact provides an easy-to-follow and automated framework that can support industry requirements and standards including PCI-DSS, CMMC, GDPR and NIST. For example, NIST reports alignment with the MITER ATT&CK Framework and the NIST Security and Privacy Controls Catalog. In addition, Core Impact’s reporting capabilities can help prove regulatory compliance during internal or external audits.

Perform network and web application tests
Accurately identify and target internal information systems for network penetration testing. Core Impact can help exploit vulnerabilities in critical networks, systems, hosts, and devices by mimicking an attacker’s methods for accessing and manipulating data, as well as testing the ability of defensive technologies to stop attacks.

Performing phishing simulations to increase security awareness
Easily run phishing campaigns for client-side social engineering tests to find out which users are susceptible and what credit can be claimed. Use the step-by-step process to create emails, select targets, and choose between browser redirects or web page emulation. Challenge users with more sophisticated and tailored phishing emails that are harder to detect as fake. Real emails can be imported from email clients to increase the credibility of the attack.
Validation Vulnerabilities are exposed through scanners
Core Impact’s one-step test can quickly verify results from over 20 different third-party scanners, including beSECURE, Frontline VM, Nessus, and BurpSuite.
After completing a scan against your environment, Core Impact can evaluate the scan output and provide prioritized validation of your infrastructure vulnerabilities.