# BloodHound vs Pentera

| Attribute | BloodHound | Pentera |
|---|---|---|
| **Vioscale score** | 24.3 (3% (low)) | 82 (15% (low)) |
| deployment.options | `{"self_hosted":true}` | `{"cloud":true}` |
| description.long | Identity attack path management platform that maps complex privilege relationships across Active Directory, cloud providers, and SaaS systems to reveal how attackers could compromise critical assets. Provides remediation guidance to eliminate the most critical attack paths in hybrid environments. | A cloud-based platform for continuous security validation that simulates attacks across networks, cloud environments, and web applications to uncover exploitable vulnerabilities and track remediation effectiveness. Combines automated attack emulation with AI to help organizations move beyond periodic penetration tests to ongoing, measurable security testing. |
| features.capabilities | - | `{"iso_27001":true,"soc2_type_ii":true,"deployment_model":"ptaas_managed","human_led_testing":true,"api_endpoint_testing":true,"web_application_testing":true,"compliance_ready_reporting":true,"automated_adversary_simulation":true,"network_infrastructure_testing":true,"remediation_validation_retesting":true,"cloud_aws_gcp_configuration_testing":true}` |
| integrations.count | 6 | - |
| integrations.list | `[{"name":"Active Directory"},{"name":"Entra"},{"name":"AWS"},{"name":"Okta"},{"name":"GitHub"},{"name":"Jamf"}]` | - |
| market.availability | - | `{"primaryMarkets":["US","EU"],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"web":true}` | `{"web":true}` |
| pricing.model | commercial | commercial |
| security.gdpr | - | yes |
| security.iso27001 | - | yes |
| security.soc2 | - | yes |

## Capabilities (Penetration Testing)

| Capability | BloodHound | Pentera |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Deployment model | - | Ptaas managed |
| Human led testing | - | ✓ |
| Automated adversary simulation | - | ✓ |
| Web application testing | - | ✓ |
| API endpoint testing | - | ✓ |
| Network infrastructure testing | - | ✓ |
| Cloud aws gcp configuration testing | - | ✓ |
| Compliance ready reporting | - | ✓ |
| Remediation validation retesting | - | ✓ |
| Jira issue tracker sync | - | - |
| SOC2 type ii | - | ✓ |
| ISO 27001 | - | ✓ |
| Pricing model | - | - |

*Source: Vioscale. Generated 2026-09-01T14:47:10.135Z. "-" = undocumented, not absent.*