ThreatNG Security Ratings help penetration testers improve efficiency by providing a prioritized view of an organization's most critical external vulnerabilities. Instead of starting with a broad, unprioritized assessment, testers can focus on areas with the highest potential impact, such as:

• Web Application Hijack Susceptibility: Quickly identify vulnerable entry points in web applications.
  

• Subdomain Takeover Susceptibility: Immediately spot subdomains at risk.
  

• BEC & Phishing Susceptibility: Understand the organization’s susceptibility to social engineering attacks.

This targeted approach saves time and resources by concentrating on the most critical weaknesses.

Yes, here are some examples:

• Example 1 (Web Application Hijack): ThreatNG identifies an insecure authentication mechanism in a web application. The penetration tester can then prioritize testing this mechanism to prevent account takeovers rather than spending time on less critical areas.
  
  

• Example 2 (Subdomain Takeover): ThreatNG discovers a subdomain pointing to a non-existent server. The tester can immediately assess the impact of a potential takeover, such as whether sensitive information is exposed or if it can be used for phishing.
  
  

• Example 3 (Data Leak Susceptibility): ThreatNG finds misconfigured cloud storage services. The penetration tester can focus on securing these services to prevent data breaches.

ThreatNG's ratings direct the tester to the most pressing security concerns in each case.

The Cyber Risk Exposure rating offers a summary of an organization's total cyber risk. This assists penetration testers in:

• Gain a comprehensive understanding of the organization's risk profile.
  

• Identify key areas of weakness, such as exposed code repositories or compromised credentials.
  

• Prioritize remediation efforts by focusing on the most critical risks.

Yes, the “Supply Chain & Third Party Exposure” rating identifies potential risks associated with an organization's supply chain and third-party relationships. For example, it can reveal if a key vendor has a history of security breaches or if there are vulnerabilities in third-party software used by the organization. This allows penetration testers to assess the risks these relationships introduce.

The “Breach & Ransomware Susceptibility” rating assesses an organization's vulnerability to data breaches and ransomware attacks. It considers factors like:

• Exposed sensitive ports and known vulnerabilities.

• Dark web presence, including compromised credentials and ransomware activity.

• Financial indicators that could increase the organization's likelihood of paying a ransom.

This helps penetration testers prioritize assessments and provide relevant recommendations.

ThreatNG includes a “Mobile App Exposure” rating that evaluates the security of an organization's mobile apps. It can discover mobile apps with exposed API keys or hardcoded credentials, helping penetration testers identify and address mobile app-related risks.

No. ThreatNG also identifies and highlights an organization's security strengths. This feature detects the presence of beneficial security controls, such as Web Application Firewalls or multi-factor authentication, and validates their effectiveness. This gives penetration testers a balanced view of the organization's security posture.

ThreatNG performs purely external unauthenticated discovery, meaning it doesn't require connectors. This is crucial for penetration testing as it simulates an attacker's view of the organization's attack surface.

ThreatNG uses various intelligence repositories, including:

• Dark web and compromised credentials.

• Ransomware events and groups.

• Known vulnerabilities and ESG violations.

• Mobile app indicators (Access Credentials, Security Credentials, and Platform-specific Identifiers)

These repositories provide valuable context for penetration testers.

The “Data Leak Susceptibility” rating helps identify potential data leakage points. It considers factors like misconfigured cloud storage, dark web mentions, and vulnerabilities in web applications. This enables penetration testers to prioritize testing areas where sensitive data is at risk.