# BloodHound vs Metasploit Framework

| Attribute | BloodHound | Metasploit Framework |
|---|---|---|
| **Vioscale score** | 24.3 (3% (low)) | 38.6 (26% (low)) |
| deployment.options | `{"self_hosted":true}` | `{"cloud":true,"self_hosted":true}` |
| description.long | Identity attack path management platform that maps complex privilege relationships across Active Directory, cloud providers, and SaaS systems to reveal how attackers could compromise critical assets. Provides remediation guidance to eliminate the most critical attack paths in hybrid environments. | Metasploit is a widely-used penetration testing platform that combines open-source community contributions with commercial support from Rapid7. It enables security teams to conduct assessments, identify vulnerabilities, and test defenses against potential attacks. |
| integrations.count | 6 | 2 |
| integrations.list | `[{"name":"Active Directory"},{"name":"Entra"},{"name":"AWS"},{"name":"Okta"},{"name":"GitHub"},{"name":"Jamf"}]` | `[{"name":"InsightVM"},{"name":"InsightIDR"}]` |
| market.availability | - | `{"hqCountry":"US","primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"web":true}` | `{"cli":true,"mac":true,"linux":true}` |
| pricing | - | `{"type":"hybrid","plans":[{"free":true,"name":"Metasploit Framework (Open Source)"},{"free":false,"name":"Metasploit Pro","contactSales":true}],"freeTier":true,"sourceUrl":"https://www.metasploit.com","retrievedAt":"2026-08-19T17:45:06.932Z","freeTrialDays":30}` |
| pricing.free_tier | - | yes |
| pricing.model | commercial | freemium |
| pricing.price_level | - | low |

## Capabilities (Penetration Testing)

| Capability | BloodHound | Metasploit Framework |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Deployment model | - | - |
| Human led testing | - | - |
| Automated adversary simulation | - | - |
| Web application testing | - | - |
| API endpoint testing | - | - |
| Network infrastructure testing | - | - |
| Cloud aws gcp configuration testing | - | - |
| Compliance ready reporting | - | - |
| Remediation validation retesting | - | - |
| Jira issue tracker sync | - | - |
| SOC2 type ii | - | - |
| ISO 27001 | - | - |
| Pricing model | - | - |

*Source: Vioscale. Generated 2026-09-01T17:13:46.056Z. "-" = undocumented, not absent.*