Test your defenses more efficiently

Rapid7 Metasploit Pro helps

penetration testers conduct assessments with Metasploit Pro
your opponents moves helps you
more efficiently by accelerating common Knowing
better prepare your defenses. Metasploit,
backed by an open source community of
tasks, such as discovery, exploitation,
200,000 members, gives you that insight. Its
bruteforcing and reporting, provides
the most popular penetration testing solution
on the planet. With an average of 1.2 exploits
advanced evasion and post-exploitation
added each day, Metasploit allows you to find
your weak point before a malicious attacker
methods, and efficiently managing the
does.
vast amounts of data generated in large
Complete engagements 45% faster through
assessments.
higher productivityPenetration testers need

to use their valuable expertise efficiently. In a

survey with more than 2,000 Metasploit users,
Metasploit Pro users said they save 45% of time
on average compared to using Metasploit
Framework. Security professionals new to
penetration testing will find it easier to become
productive with Metasploit Pro than with open
source alternatives.

45%

1.2

Metasploit Pro helps you conduct penetration tests

45% faster, and with 1.2 new exploits added each day,
Metasploit Pro helps you find your weaknesses faster
than anyone else.

Validate vulnerabilities to prioritize

remediationVulnerability scanners can
determine installed software and its
vulnerabilities but not whether it poses a high
risk in the context of your network. This can be
dangerous as IT teams dont know which
vulnerabilities need to be remediated first.
Metasploit Pro closes the vulnerability
validation loop by returning results to Nexpose,
where exploitability of a vulnerability can be
used to create reports and prioritize
vulnerabilities for remediation.

073014

| Rapid7.com

Metasploit Pro Product Brief

Product Brief

Metasploit Pro
the attackers playbook

Using hours
efficiently is
critical, and
Metasploit Pro is
a huge help on
this. Time
savings are the
biggest reason
for us to use
Metasploit Pro.
Jim OGorman,
President,
Offensive Security

Metasploit Pro can help penetration testers to:

Manage phishing awareness to
reduce user riskUsers are often the
weakest part of the security chain,
exposing organizations to attacks
phishing has seen a rise in recent
years. Metasploit Pro measures the
effectiveness of security awareness
trainings by running simulated
phishing campaigns, helping to
manage exposure to this common
attack vector.
Metasploit Pro integrates with Rapid7
UserInsight to provide phishing risk in
the context of a more comprehensive
user risk, including network access,
cloud service usage, and compromised
credentials.
Leverage the Metasploit open source
project and its leading exploit
libraryRapid7 manages the
Metasploit project, the largest
collection of code-reviewed exploits,
backed by a community of over 200,000
members. This gives Rapid7 unique
insights in to the latest attacker
methods and mindset.
Uncover weak and reused
credentialsCredentials have become
the #1 attack vector for attackers.
With Metasploit Pro, you can efficiently
test your network for weak and reused
passwords.

| Rapid7.com

Manage data in large assessments

Conducting an assessment in
networks over 100 hosts can be
challenging. Metasploit Pro scales to
support thousands of hosts.
Evade leading defensive solutions
Create dynamic payloads to evade
detection by anti-malware solutions.
Metasploit Pro evades leading
anti-virus solutions 90% of the time,
with no solution detecting all options.
Get past firewall and IPS using
traffic-level evasion techniques.
Control compromised machines and
take over the networkControl
machines you have compromised with
over 200 post-exploitation modules.
Get local network access with VPN
pivoting.
Automatically generate reports
containing key findingsWriting
reports is often the most frustrating
part of the job and takes up to 30% of
time on an assessment. Generate
reports to show your findings and sort
them by regulations such as PCI DSS
and FISMA.

Metasploit Pro Product Brief