Company and Product Reviews

“We have liked this tool for a long time, and every year we expect to see it unseated by one of its competitors. It hasn’t happened yet. In our view, Impact Professional still is top of the heap…”

Core Security moves into Amazon AWS penetration testing with CloudInspect release
“We like that Core is thinking about its customers and their operational roadmaps – and not just Core's development roadmap. Many of Core's customers are likely looking to move at least some portion of their infrastructures into a cloud-hosted environment in the future.”

“Every year we look at this group and … Core Impact Professional becomes our benchmark. First, the premise behind this product has always been efficient penetration testing. That is what it does, what it focuses on, and how its developers present it to the market. This philosophy has worked well for Core.”

Core Security adds much-needed risk INSIGHT to enterprise penetration testing
“Providing continuous monitoring of assets and associated threat avenues may allow Core to tap new market opportunities where traditional pen testing is viewed by executives as a systems availability risk that's still hard to digest.”

"It all started with a nifty penetration test tool and the folks at this Hall of Famer have never looked back. From one basic product in 2001 after four years of consulting to today's stable of products and services, Core Security Technologies has led the way in the penetration testing market."

Core Security looks to broaden its reach with Impact update, new products
"To fill in the gaps, Core is offering its security testing and measurement offerings as a means to validate and measure the effectiveness of security controls and compliance."

"Core Impact is back again with a new version (Professional 10), and just when we thought this product could not get any more powerful it surprises us once again … This year, Core Security Technologies added Wi-Fi penetration to the list. With this capability, users can now find the Wi-Fi network even if the SSID (service set identifier) is not broadcasting and try to break the encryption key."

"The absolute top of the line for network security assessments at all levels. Again, this year, we award Core Impact our highest rating of SC Lab Approved."

"We have seen many of the other commercial and open source pen test tools and there are some very good ones. But when it comes to needing a consistent, configurable, customizable, easy-to-run pen testing tool, Core Impact from Core Security is a favorite hands-down. And it's because of its strength and consistency that it makes our anniversary list."

"One of our favorite tools is back this year and it's better than ever. Core Impact Pro 8 is the ultimate tool in vulnerability assessment and penetration testing. It provides a comprehensive suite of features gathered in one place. This product can be used to scan and exploit systems using multiple modules for information gathering, exploitation, local information gathering, privilege escalation, pivoting, and clean-up and reporting. This tool also deploys agents that run in the target's memory if a target can be exploited."

Core Security, with IMPACT at Version 8 and Customers above 800, Hits Its Stride
Core has not just turned the corner, we believe, but is in fact showing strong growth in terms of customers, employee headcount and product development. Core is at the lead of and largely responsible for a new wave of adoption of penetration-testing tools within the enterprise. We have long said that pen testing may have enterprise legs, but will now say that the legs are here and steady.

"I just love these folks. Take the best open source pen testing tool you can think of, put it on steroids, give it a user interface that makes it simple and fast to pen test in a production environ-ment without losing the granularity of manual testing if you need it, and you have Core Impact. Well, almost. Every year I say that I am going to find a better tool, and I actually do comb the market - unsuccessfully."

"Core Impact is the ultimate tool for finding and exploiting possible holes in a network."

Core Security's offering is a pure penetration tool that comes with a set of preprogrammed exploits that take advantage of known security flaws in products such as Adobe Flash and Windows. It can discover any vulnerabilities that need to be patched and fixed. It can also launch attacks through a specific device to discover the extent of damage possible.

"CORE IMPACT provides a full picture of all possible holes in not only network assets, but also web applications and other remote exploits. We find this product to be an excellent investment for almost any enterprise."

"Core Impact is a powerful tool that delivers quick, accurate assessments of the security of a network. The latest version expands the scope with Web application security checks and refines the valuable e-mail phishing feature for assessing the security savvy of end-users. Core's smart dashboard, friendly UI, attack configuration wizards, and focused reports make penetration testing easier than ever to conduct and interpret."

"We have used IMPACT in SC Labs for two years and have found nothing else that even comes close, open source or commercial, for application as a production quality penetration [testing] tool."

"We have reviewed, tested, and played with many products and applications over the years, but none of them compare to CORE IMPACT. From the moment you purchase the product, to the first time you get a shell on a vulnerable system, you are constantly being made aware of the fact that Core understands security."

"CORE IMPACT was a blast to test and a product I am certain would benefit organizations that choose to engage it... I heartily recommend contacting Core Security for a live demo. IMPACT has all the convenience of fast food with the quality better suited to a five-star restaurant. Bon appetite, pen testers!"

"CORE IMPACT 6.0 is an amazing tool to validate your security posture. We highly recommend it to security engineers to verify the vulnerability of their networks, or confirm test results from third-party consultants."

"We rate CORE IMPACT as Lab Approved for its comprehensive capabilities, flexibility and ease of use, and we will be adding it to our test bench for the coming year."

"After using IMPACT it seems obvious to us that manual penetration is obsolete."

"For organizations the need to be very sure of the security of critical or sensitive systems, CORE IMPACT is a must-have tool and for these organizations we rate CORE IMPACT highly recommended."

IMPACT receives 4 1/2 stars.

"We give our Tester's Choice Award to CORE IMPACT. Its interface offers a true persistent workspace, flexible agents, regular updates to exploits and some useful built-in automation features."

"I strongly suggest CORE IMPACT to companies who are looking to implement a security assessment plan."