AttackForge

Introducing AttackForge Flows! 🤖🦾 AttackForge's comprehensive, end-to-end automation engine - powered by AFScript. Flows can help you to automate AttackForge with nearly unlimited systems! 🤯 Examples you can do with Flows in the comments. youtu.be/tTbq4Dbh-A8

Why did we create a programming language for AttackForge? The answer is in this video 😉 #afscript #pentest #security #attackforge #Pentesting #report #reporting

HOT OFF THE PRESS! 🔥🗞️📰 A world first integration to help solve the painful problem of Resurfacing Vulnerabilities! Today, @secdim and @AttackForge announce their collaboration - to combine Pentest Management with Security and AppSec Learning - to combat the systemic issue of #Resurfacing #Vulnerabilities. “One of the most irritating and costly problems in penetration testing today is the same vulnerabilities getting reported time and time again, often due to gaps in knowledge and skills... By integrating AttackForge into SecDim – we can now link real vulnerabilities discovered during a penetration test to the relevant security learning exercises. This makes it possible for engineers to explore the vulnerability in a safe sandbox - to learn, build and verify that their security patch works” said Stanislav Filshtinskiy Filshtinskiy, Co-Founder of AttackForge. “Penetration testing often results in recommendations to engineers on how to fix the vulnerability, and it stops there. The integration with SecDim goes further – taking that very same vulnerability and enabling the engineer from within AttackForge to deploy a private learning environment where they can experiment with the recommendations from the pentest. By understanding the root cause for vulnerabilities and verifying security patches sooner, organizations can reduce the exposure times for vulnerabilities. This reduces costs on failed retests and increases pooled knowledge for engineering teams to stop those vulnerabilities happening again” said Fil Filiposki, Co-Founder of AttackForge. “Developers are natural problem solvers. However, security is rarely communicated to them as a software engineering problem. We cannot expect a developer to read through a vulnerability description and immediately understand how to fix it. With AttackForge integration, we present the vulnerabilities discovered in their recent pentests as a programming challenge. The challenge is presented to them in a sandbox, where they can explore the vulnerability, learn its root cause, experiment and build a robust security patch.” said Dr. Pedram Hayati, Founder of SecDim. For more information see the Press Release: newswire.com/news/attackforg… This integration is available now, and free for all AttackForge customers.  You can also try this integration on-demand at try.attackforge.io #attackforge #secdim #security #collaboration #learning #training #integration

We just launched a new experience for buying AttackForge Core! 🥳🔥 You now get an even more streamlined checkout and deployment: ✅ NEW Bootstrapped inital configuration for optimal first-time use ✅ More features enabled by default! ✅ Slick login experience ✅ Faster deployments - if 2-minutes previously was too long 😉 Check out the new experience from buy.attackforge.io You can also deploy a trial on-demand from try.attackforge.io #saas #pentest #appsec #redteam #offensivesecurity

A Major Release has just landed at @AttackForge! 🚀 📚 Asset Libraries to Rule them All! 📊 Portfolio Enhancements 📝 ReportGen v2.9 🥷 MITRE ATT&CK v14.1 📖 MITRE CWE v4.13 + MITRE CAPEC v3.9 🔐 Report Locking 👥 Custom Project Roles 📧 Custom System Email Notifications 🪪 Custom Report Names 👨‍💻 Manage Roles via SSO Groups 🙋‍♀️ UX Enhancements 🔌 Updates to Self-Service APIs We also had some other major wins! 🚀 Launched a new on-demand trial service - try.attackforge.io 👾 Video tutorial on how to do Pentest Report Automation - youtu.be/yTBrkovVTYg 🥷 Video tutorial on Red Teaming with AttackForge - youtu.be/VAczGVdiLYk For full release notes support.attackforge.com/rele… You can also read about it on our Blog blog.attackforge.com/ #penetrationtesting #pentesting #pentest #appsec #redteam #appsecurity #redteaming #penetrationtest #offsec #offensivesecurity

Link to video: youtu.be/yTBrkovVTYg

We just launched a new service! 🍾 You can now deploy an on-demand trial of @AttackForge with just an email address to get started. Your trial will include: 🖥️ a dedicated AttackForge tenant just for you and your team 🏎️ demo db to help get started fast! 🔥 fully-featured so you can explore everything! ⏱️< 2 minutes to deploy 🆓 No credit card required Check out this short video on how to start your trial and introduction to the best pentest management and reporting platform in the world! 🌎 Deploy a trial right now! try.attackforge.io #pentest #penetrationtesting #redteam #appsec #Pentesting #cybersecurity #infosec #attackforge #pentestreport #report #offensivesecurity

Link to video: youtu.be/_aBsBwbX1S0?si=OiBN…

Automating your Pentest Reporting is easier when you’re using AttackForge 🙌 You can have your penetration testing reports automatically converted to PDF, encrypted and emailed to your customers when the report is finalized - with just the click of a few buttons! In this short video, we show you how to: ✔ Configure a custom workflow for reporting status and release approval ✔ Choose which reports should be released - detailed report, executive report, retest report, etc. ✔ Determine who should receive the report(s) - customers, QA team, etc. ✔ Process the automation event and retrieve all necessary information ✔ Programmatically create custom DOCX reports using AttackForge ReportGen ✔ Programmatically convert DOCX reports to PDF ✔ Programmatically encrypt PDF reports ✔ Programmatically email reports to intended recipients This is one workflow for how you could do Pentest Report Automation better using AttackForge. You can create your own workflows to align with how YOU do pentest reporting. At AttackForge we specialize in making pentest management and reporting easy. Join hundreds of security teams around the world making penetration testing faster and easier using AttackForge. Reach out to our team if you would like to try out AttackForge and see the difference yourself. #pentestreportautomation #pentestingreportautomation #pentestreportingautomation #pentestreport #pentestingreport #pentestreporting #reportautomation #penetrationtesting #pentest #report #automation

A message from one of our Founders (Fil): We just had our EOY team celebration and it brings me immense joy to announce the wins and realizations we made this year 🥳 ✅ 1,300% growth in new customers! Bringing AttackForge to so many new security teams in 2023! ✅ Released AttackForge Version 2! after many years of R&D ✅ 4 Major Releases bringing an incredible amount of new capabilities to our platforms ✅ Major updates to Houston - our internal Command and Control centre for all things AttackForge. Scaling is now a breeze! ✅ Introduced UK and Europe hosting regions (in additon to US) for our on-demand Core platform (more regions coming soon!) ✅ Introduced Pro, Team, Consultancy and SME plans for AttackForge Core - making AttackForge more affordable whilst adding even more value! ✅ Launched AttackForge GitHub! Also published ReportGen to NPM! ✅ Built a new website! plus so much more! 👀 We will be launching an entirely new product early next year, this will be one you won’t want to miss! 👀 We’re also launching very soon an on-demand fully-featured trial of AttackForge, no credit-cards needed! Deploy it when you need it, no questions asked! I personally had one of the most rewarding and simultaneously challenging years of my life (the extra kilos are evidence 🤣). Adding to that becoming a first time father of a beautiful baby boy Bastian ❤️ The love and true-blue spirit of our team, and unconditional support from my wife, made everything possible. We ALL made exceptional sacrifices this year, and for that I’m forever indebted and grateful to each and everyone. To all our customers and believers in what AttackForge stands for - my sincerest Thank You 🙏 We are still a self-funded, self-made, globally-scaling (and dominating) Aussie cyber startup!! People say not to mix family and business - I believe we are an exception. Team AttackForge are undoubtedly the best-of-the-best, and genuine amazing humans. There is no greater time than right now to be part of one of the most exciting cyber start-ups! If you’re a senior software engineer looking to make a real difference, let’s connect! On behalf of Team AF - Wishing you all a happy holidays 🎄and looking forward to what 2024 brings! ❤️

Link to video on YouTube: youtu.be/VAczGVdiLYk

Red Teaming is easier when you’re using AttackForge 🙌 In this short video, we show you how to: ✔ Import @MITREattack Enterprise as your Red Team testing methodology ✔ Assign MITRE ATT&CK Enterprise to a Red Team assessment ✔ Track which TTPs get executed, by whom, when and against which assets ✔ Capture notes and evidence for each TTP ✔ Create and link Red Team vulnerabilities to TTPs ✔ Build Attack Chains to prove exploitation against Red Team objectives ✔ Create Red Team reports This is one workflow for how you could do Red Teaming better in AttackForge. You can create your own workflows to align with how YOU do red teaming. At @AttackForge we specialize in making red team management and reporting easy. Join hundreds of security teams around the world making penetration testing faster and easier using AttackForge. Reach out to our team if you would like to try out AttackForge and see the difference yourself. #redteaming #pentest #redteam #physicalsecurity #socialengineering #attackchain #killchain #phishing #iotsecurity #hardwaresecurity #hardwarehacking #networksecurity #mitre #attack pentest report automation red team report automation red team collaboration

One of the most requested and highly anticipated features has arrived – Vulnerability Form Builder! You can now build sections for all of your different security testing projects: ✔ Web, API and Mobile Penetration Testing ✔ Network Infrastructure and Wireless ✔ Red Teaming and Physical Security Assessment ✔ Social Engineering and Phishing ✔ Configuration Review and Audit ✔ IoT and Hardware Hacking ✔ Compliance Testing ✔ Thick-client Testing Vulnerability Form Builder provides unprecedented levels of customization when it comes to how you want to create and view your vulnerabilities. At AttackForge we specialize in making pentest management and reporting easy. Reach out to our team if you would like to try out AttackForge and see the difference yourself. #pentesting #made #easy #custom #vulnerability #form #builder #web #api #mobile #network #infrastructure #redteaming #physicalsecurity #socialengineering #phishing #iotsecurity #hardwaresecurity #hardwarehacking

One of our BIGGEST EVER Releases has just landed at AttackForge! 🚀 ✔ Vulnerability Form Builder ✔ ReportGen v2.8 ✔ Improved Writeup Access Controls ✔ New File Uploads & Inline Images ✔ User Experience Enhancements ✔ New Rich-Text Fields ✔ New Test Suites & Import Test Cases ✔ Import Writeups ✔ New Features ✔ Updates to Self-Service API ✔ New Video Tutorials For full release notes - check out support.attackforge.com/rele… Also you can read about it on our Blog: blog.attackforge.com/ #penetrationtesting #pentesting #pentest #appsec #redteam

Thank you @AISA_National for another amazing Cyber Conference! Our team had a blast! The keynotes from Brian Cox, Chris Hadfield and Mikko Hypponen were thought provoking. Looking forward to CyberCon 2024!

Thank you @BSidesMelbourne for another wonderful conference! 👏 It was great catching up with so many friends and supporting our local BSides. #bsides #melbourne

Searching for ways to improve your infrastructure penetration testing? We put together a short video which shows how to: ▶ Set up a dedicated space for your project team to collaborate and share information and findings ▶ Apply consistent and standardized testing methodologies to ensure nothing gets missed, and full visibility into testing progress - who, what, when, how ▶ Import assets and vulnerabilities easily using @nmap and @TenableSecurity Nessus, take advantage of grouping to reduce information overload ▶ Track all of your infrastructure testing against compliance, business units, time periods - or perform comparison ▶ Generate comprehensive testing report showcasing executive and testing summary, vulnerabilities, test cases and mapping tables for easy lookups At @AttackForge we specialize in making pentest management and reporting easy. Reach out to our team if you would like to try out AttackForge Core and see the difference yourself. #pentesting #pentest #penetrationtest pentest management pentest reporting

The NEW ReportGen CLI tool + library is now available! 🚀🔥 ReportGen Node.js Library is great for people who want to simply "import" ReportGen into their existing codebase, and build custom penetration testing reports easily and effortlessly. ReportGen CLI is great for people who prefer to build pentest reports on the command line, and combine ReportGen into an existing automation or pipeline. Both options can be accessed and downloaded via NPM. npmjs.com/search?q=attackfor… #pentest #reportingtools #automation #npm #Pentesting #redteam #appsec