Re: Penetration Testing Software

[Karen Stopford <stopfordk () CT EDU>]

Core Impact is a little pricey, but you may get a break on licensing costs and can reduce the overall price by limiting 
the number of hosts/networks you scan at any given time.  Core also provides external PEN testing services, and in my 
last analysis their price/performance far outdid the competition.

Their Web site is http://www.coresecurity.com/ .


C. Karen Stopford, CISSP
Associate Executive Officer for I.T. Security
CT State University System
39 Woodland Street
Hartford, CT  06105
(860) 493-0116
Note: This email does is not intended to serve as an endorsement of any product or service, and the opinion expressed 
herein is solely that of the author based on prior private sector experience, and does not in any way reflect the 
opinion or position of the CT State University System.
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of James R. 
Pardonek
Sent: Monday, March 09, 2009 5:24 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Penetration Testing Software

We are looking at penetration testing, either by a third party or by using purchased software in-house.  I was curious 
what others were doing, some costs and issues.

Thanks,

James R. Pardonek, CISSP
Senior Network Administrator
Network Infrastructure Management and Maintenance
Computing Technology and Information Services
Purdue University Calumet
Hammond, Indiana