Skip to content

Tests and Assessments

Explore the penetration test types available to assess and strengthen your network’s security posture. Below is one pragmatic sequence of NodeZero tests and related techniques – scroll down for details about supported tests by category.

  1. Set up RunnerAutomate pentesting – schedule and manage recurring tests remotely from the Portal UI
  2. Segmentation testScan your internal network to identify potential targets for future attacks
  3. Internal testSimulate an attack on your network from within your own infrastructure
  4. Optional post-test follow-upsChoose either, both, or neither
  5. External testDiscover and test vulnerable external-facing assets
  6. Templatize testsSave pentest configurations to easily repeat and schedule tests
  7. Schedule testsAutomate repeated testing from the NodeZero Portal or CLI
  8. Cloud-based testsChoose any or all
  9. Other tests to considerChoose any or all

Infrastructure Attack Surface

Infrastructure Attack Surface tests are NodeZero's autonomous network penetration tests. These all-inclusive tests are deployable from various perspectives. They identify attack paths across on-premises, hybrid-cloud, perimeter, and cloud networks.

Internal Pentest
A pentest run against an internal network. NodeZero is deployed on a Docker host within your private network.
External Attacks
NodeZero runs from the Horizon3.ai cloud and tests your public-facing or external assets.
Kubernetes Pentest
Deploy NodeZero directly into a Kubernetes cluster, either on-prem or in the cloud, to pentest its security controls and vulnerabilities.

Identity Attack Surface

NodeZero's Identity Attack Surface tests find and exploit real-world attack-paths and vulnerabilities in IAM controls and platforms.

AWS Pentest
NodeZero uses a privileged role in your AWS account to discover vulnerabilities and misconfigurations.
Azure Entra ID Pentest
NodeZero runs on a Docker host within your private network to discover and assess attack paths within your hybrid Entra ID environment.
Active Directory Password Audit
Audit your users' Active Directory Passwords. NodeZero will reveal weak, breached, and reused passwords.

Operational Scenario Testing

NodeZero's Operational Scenario tests are used to validate your organization's security readiness by using real-world attack techniques to tests your environment's resilience to operational scenarios.

Segmentation Testing
Discover your internal attack surface. NodeZero enumerates IPS, ports, services and applications within your network.
Phishing Pentest
Use NodeZero to measure the impact of phishing campaigns by injecting the phished credentials into an internal pentest.
Insider Threat Testing
Use NodeZero to validate your organization's security posture against insider threats.

Attack Configurations

NodeZero offers flexible Attack Configurations to customize how penetration tests are conducted. These configurations allow you to choose the specific attack techniques and modules based on your target environment. By adjusting these settings, you can simulate various types of attacks to assess the security posture of your systems and networks.

For more detailed information on choosing attack configuration options, see our Attack Configurations topic.


Back to Portal home
NodeZero Runner