Penetration Testing Software
Put the right edition of our penetration testing software to work for your today
Pro Enterprise Security Programs & Advanced Penetration Tests
For Mid-sized and Enterprise IT Security Teams
- Express features plus:
- Advanced team workflow automation and reporting and Risk validation
- Social engineering
- Web App Testing
- Security Audit Wizards
- API for custom integrations
Free 7-Day Trial
Express Baseline Penetration Tests
For IT Generalists in SMBs
- Community features plus:
- Baseline Penetration Testing Workflow
- Smart exploitation
- Password auditing
- Baseline penetration testing reports
Compare: Express vs. Pro
Buy Online
Community Free Entry-level
Edition
For Small Companies and Students
- Simple web interface
- Data management
- Network discovery and third-party import
- Basic exploitation
Compare: Community vs. Pro
Free Download
Framework Free Open Source Development Platform
For Developers and Security Researchers
- Basic command line interface
- Third-party import
- Manual exploitation
- Manual brute forcing
Compare: Framework vs. Pro
Free Download
Test your network's defenses with our penetration testing software, before someone else does.
Use our penetration testing software to:
- Validate security risks as part of your vulnerability management program.
- Safely simulate attacks on your network to uncover security issues.
- Verify your defenses, security controls and mitigation efforts.
- Measure the effectiveness of your security awareness program.
- Audit password security beyond Windows and Linux logins.
Penetration Testing Software Download
Download Metasploit today for free, and start testing your network security
Get Started Today
Here's why Metasploit is the
world's leading penetration testing software
Real-world Security Testing
Get a security reality check with exploitation, risk validation, advanced attacks and evasion techniques.
Read more below
Risk Validation
Verify which potential vulnerabilities really put your network and data at risk.
Read more below
Productivity Boost
Complete assignments faster with efficient workflows, wizards, data management, APIs and automation.
Read more below
Web and Command-line Interfaces
Select the interface of your choice for more efficiency.
Read more below
Network Discovery
Find network assets or import from over a dozen applications.
Read more below
Password Auditing
Uncover weak passwords on over a dozen network services.
Read more below
Social Engineering
Measure security awareness or trick users to get into the network.
Read more below
Web App Testing
Audit on-premise and cloud-based web apps to identify OWASP Top 10 vulnerabilities.
Read more below
Teamwork and Reporting
Leverage team members' expertise and create reports at the push of a button.
Read more below
Real-World Security Testing
Get a reality check on your defenses by using real attack techniques with Metasploit, our penetration testing software.
Testing your defenses only makes sense if you are using the same methods attackers are using in the real world. Get real with exploitation, risk validation, advanced attack and evasion techniques.
The World's Most Successful Penetration Testing Software
With more than one million downloads a year and a community of 150,000 security researchers,
contributors and users, you're in great company when testing your infrastructure's security.
More about:
Risk Validation
There's no way you can address every threat that comes your way, so spend your time wisely by validating which security risks pose a real threat.
Use Metasploit, our penetration testing software to:
- Use time efficiently in addressing high-risk threats that need your attention and downgrading low-risk threats.
- Gain credibility with stakeholder teams by delivering remediation reports that are concise and relevant.
More about:
Productivity Boost
Get a little help and be done in half the time.
Let our penetration testing software, Metasploit, manage your data and automate mundane or repetitive tasks, making your work more enjoyable and efficient.
Use wizards to simplify and speed up common jobs.
Attackers Use Automation. So Why aren't You?
Stay in control with standard workflows and let our penetration testing software, Metasploit, manage all network and evidence data for you.
Schedule custom workflows, and write your own integrations with the Metasploit Pro API.
More about:
Web and Command-line Interfaces
Everyone has a preference, and you've got yours. Our penetration testing software allows you to choose your favorite user interface - web-based or command-line - or mix it up!
New to Metasploit? Use the web-based interface to reduce the need for training, and get the job done faster.
Metasploit veteran? Use the advanced CLI functionality of Metasploit Pro to get access to new, high-level commands, better manage your data and generate a single report for all activities.
Network Discovery
Before you can start protecting your network, you need to know
what's on it.
Our penetration testing software allows you to:
- Scan for available hosts, identifying open ports, services, applications, operating systems and versions.
- Launch a Nexpose vulnerability scan or access existing results.
- Import reports from over a dozen third-party network discovery and vulnerability management solutions.
More about:
Password Auditing
Uncover weak passwords on your network to protect against brute forcing attacks that go way beyond Windows and Linux credentials.
Test over a dozen network services, including SSH, VNC and telnet.
Make intelligent guesses based on frequently used passwords, custom dictionaries, vendor default passwords and data collected from the environment.
Download our penetration testing software to get started.
More about:
Social Engineering
By using a penetration testing software, you can see how intruders could get into your network through phishing emails, malicious websites and USB flash drives.
For ongoing security programs, measure the security awareness of your users by sending phishing emails.
More about:
Web App Testing
Audit on-premise and cloud-based web apps to identify OWASP Top 10 2013 vulnerabilities.
Exploit web app vulnerabilities to demonstrate risk to applications owners or as part of a penetration test.
Download our penetration testing software to start testing your web apps today.
Teamwork and Reporting
Share results and work more effectively in teams to leverage individual expertise.
Mentor junior team members by delegating simpler tasks to them as part of a larger engagement.
Tag assets to assign hosts to team members.
And when you're done, generate reports that reflect the entire team's work.
Choose report templates depending on the stakeholder and compliance regulation.
Why Rapid7 Metasploit?
From the beginning, Metasploit has been a thought-leading project. It was the first open source framework to standardize exploit development, pioneered risk validation in vulnerability management, and continues to innovate, enabling security professionals to take the view of an attacker to identify weaknesses in their defenses. Exploits are written by open source contributors, providing broad, timely coverage; they are tested and ranked by reliability to ensure safe testing. With Metasploit, you'll always be up to date on the latest attack techniques so you can defend your network better. Join the vibrant Metasploit security community of more than 175,000 users, security researchers and exploit developers today.
Whitepaper - What is Penetration Testing?
Learn more about penetration testing
Download Now
Request a Metasploit Demo
Let us walk you through Metasploit
Request A Demo