Core Impact
Penetration testing software to safely uncover and exploit security weaknesses
Core Impact is designed to enable security teams to conduct advanced penetration tests with ease. With guided automation and certified exploits, the powerful penetration testing software enables you to safely test your environment using the same techniques as today's adversaries.
Replicate attacks across network infrastructure, endpoints, web, and applications to reveal exploited vulnerabilities, empowering you to immediately remediate risks.
Simple enough for your first test, powerful enough for the rest.
Rapid Penetration Testing
Use automated Rapid Penetration Tests (RPTs) to discover, test, and report in just a few simple steps.
Core Certified Exploits
Test with confidence using a trusted platform designed and supported by experts for more than 20 years.
Centralized Toolset
Maximize resources by gathering information, exploiting systems, and generating reports, all in one place.
Key Features
Guided Automation
Core Impact's Rapid Penetration Tests (RPTs) are accessible automations designed to automate common and repetitive tasks. These high-level tests help optimize the use of your security resources by simplifying processes, maximizing efficiency, and enabling pen testers to focus on more complex issues.
Certified Exploits
Leverage our professionally written and validated exploit library for real-world testing capabilities. This stable library of commercial-grade exploits has real-time updates of new penetration testing exploits and tests for additional platforms as they become available, including third party exploits from ExCraft.
Patented Agents
Core Impact’s patented Core Agents simplify interactions with remote hosts. You can tell Core Impact what you’d like to do with the remote host and the agent will take care of the technical aspects.
Robust Error Prevention
Enable programmable self-destruct capabilities for agents at different levels (product, workspace, module/RPT). This means no agent is left behind after testing to drain resources or be used as a potential backdoor for attackers.
Teaming
Multiple security testers have the capability to interact in the same session, giving teams the ability to securely share data and delegate testing tasks. These shared workspaces provide a common view of discovered and compromised network targets for optimal collaboration.
Reporting
Automated reporting capabilities for consistent, thorough recording of engagements that can be used to plan and prioritize remediation efforts and prove compliance for regulations like PCI DSS, GDPR, and HIPAA.
Reports also feature the option of adding the layer output of the MITRE ATT&CK™ framework, a matrix of known attack tactics and techniques that can help classify attacks and further prioritize risks.
Watch a Short Demo
Maximize Testing Visibility
Use Core Impact's attack map to get a real-time overview of attack chains, pivoting and any other activities completed during testing. This network graph view provides visual insight that allows security teams to better determine the best path forward in the testing engagement.
Product Specifications
Platforms Monitored
Core Impact runs on Windows and helps you test the following types of platforms:
- Operating Systems like Windows, Linux, and Mac
- Cloud (Public, Private, Hybrid)
- Databases
- Web Services
- Network Appliances
- Software Applications
- Your Critical Data
Integrations
In order to further centralize your testing environment and increase the breadth of your program, Core Impact integrates with other security testing tools, including:
- Cobalt Strike
- Metasploit
- PowerShell Empire
- Plextrac
Vulnerability Scanner Integration
Core Impact can import data and validate vulnerabilities from multiple scanners, including:
- beSECURE
- Burp Suite
- Frontline VM
- Nessus
- Nexpose
- OpenVAS
- Nmap
- Qualys
- SAINT
- Tenable
Deployment Options
Core Impact runs on Windows with an integrated SQL database, physical or virtual system. Core Impact can be installed and running in 30 minutes or less.
Common Use Cases
Automate the Routine
With Core Impact, you can easily automate routine testing, including proving PCI compliance, to maximize your resources, reserving third-party testing for your most robust and complex requests.
Give Your Vulnerability Scans an Ally
Core Impact validates vulnerabilities identified through more than 20 popular scanners, helping you prioritize remediation for your greatest security risks.
Measure Security Awareness
Use the ransomware simulator and Core Impact’s dynamic phishing capabilities to find out which employees are susceptible to these attacks and which critical data is most at risk.
Validate Remediation Effectiveness
Re-test exploited systems after a penetration test to verify that remediation measures or compensating controls are effective and working.
“What takes us three hours to do manually takes ten minutes with an automated tool like Core Impact, so it makes my day easier."
See Core Impact in Action
Conduct advanced penetration tests with ease and efficiency. See how Core Impact can streamline pen testing in your environment by requesting a free trial.
Featured Resources
Looking for Core Impact training? Find a self-paced online training video that meets your needs in our Core Impact training library.
Ready to Begin Using Core Impact?
Explore our pricing page to learn what Core Impact Basic, Pro, and Enterprise have to offer and find the right version for your needs.
Offensive Security Bundles
Did you know Core Impact works with Frontline Vulnerability Manager and Cobalt Strike adversary simulation to create multi-layer offensive security solution bundles? These bundles allow you to assemble a proactive security portfolio that best fits your organization. They also provide efficiencies, such as centralization and reduced console fatigue, that will optimize your team resources and strengthen your security program -- all at a discounted price.