PENTRA

Spec sheet

Purpose

PENTRA is a penetration testing and vulnerability management platform that executes MITRE ATT&CK techniques and OWASP test cases at the individual technique level.Read 8 Oct 2026 · pentrasecurity.io

Intended users

The platform describes use by CISOs, SOC managers, pentesters and red teams, GRC and compliance teams, and CTOs or CIOs.Read 8 Oct 2026 · pentrasecurity.io

Deployment

PENTRA is deployed on-premises, requires no cloud connectivity, and is described as fully air-gappable.Read 8 Oct 2026 · pentrasecurity.io

Agent requirement

The network module uses a Windows agent on a customer-provided initial-access machine; the web, mobile, API, and Purple modules run from the C2 server.Read 8 Oct 2026 · pentrasecurity.io

Availability

The site says engagements are supported internationally, with remote delivery available across all regions.Read 8 Oct 2026 · pentrasecurity.io

Coverage

The platform covers internal network and Active Directory, web applications, mobile applications, and APIs.Read 8 Oct 2026 · pentrasecurity.io

Framework mappings

Reports cross-reference findings to NIST, PCI-DSS, and ISO 27001 controls.Read 8 Oct 2026 · pentrasecurity.io

Frameworks

The platform aligns network testing with MITRE ATT&CK, application testing with OWASP, and reports findings against NIST, PCI-DSS, and ISO 27001 controls.Read 8 Oct 2026 · pentrasecurity.io

Human validation

An engineer confirms exploitability, affected objects, severity, and evidence before a finding is recorded.Read 8 Oct 2026 · pentrasecurity.io

Managed service

Reacts offers PENTRA as a fully managed penetration testing service as well as a platform for internal teams.Read 8 Oct 2026 · pentrasecurity.io

Network agent

The Network module requires an agent on a customer-provided Windows machine; the Web, Mobile, API, and Purple modules run from the C2 server directly.Read 8 Oct 2026 · pentrasecurity.io

Purple Team

PT++ supports simultaneous Red Team execution and Blue Team detection validation in the same engagement.Read 8 Oct 2026 · pentrasecurity.io

Remediation

PENTRA tracks findings through mitigation and retesting, recording new evidence when an engineer checks whether a fix worked.Read 8 Oct 2026 · pentrasecurity.io

Reports

The platform generates PDF and Microsoft Word reports with executive summaries, security and detection metrics, evidence screenshots, and framework mappings.Read 8 Oct 2026 · pentrasecurity.io

Scope tracking

Its Open Points tracker requires in-scope techniques to be executed and validated before an engagement can close.Read 8 Oct 2026 · pentrasecurity.io

Security controls

Agent-to-server communication is TLS-encrypted, each agent has a unique certificate, and execution output is stored in private, non-web-accessible storage.Read 8 Oct 2026 · pentrasecurity.io

Support and delivery

Reacts offers fully managed penetration testing delivered by certified security engineers using PENTRA, with international and remote engagement availability.Read 8 Oct 2026 · pentrasecurity.io

Threat research

The PENTRA Security Lab develops attack content including updated MITRE ATT&CK techniques, OWASP test cases, AI-generated payloads, and detection use cases.Read 8 Oct 2026 · pentrasecurity.io

Validation

Security engineers validate results, Blue Teams mark detections, and findings include proof of execution.Read 8 Oct 2026 · pentrasecurity.io

Where Specifiction places it

• Penetration Testing Software#28 of 346.9