Vulnerability Scanning Inside Your Perimeter
Scan internal networks, AD domains, and air-gapped environments - no cloud dependency required. Pentesterra scanner nodes deploy inside your infrastructure and report to a central console, keeping all sensitive data where it belongs.
Deployment Options
SaaS + Private Scanner Nodes
Most popularCloud orchestration with your own scanner nodes deployed inside the network. Scan data never leaves your perimeter.
- ✓Managed control plane with automatic updates
- ✓Deploy scanner nodes as Docker containers or VMs
- ✓Internal targets unreachable from the internet - fully covered
- ✓Unified results in the cloud dashboard
Dedicated PaaS (Single-Tenant)
EnterpriseA private, single-tenant environment in your preferred cloud region. Full data isolation, your own node fleet.
- ✓Isolated control plane - no shared infrastructure
- ✓Deploy scanner and worker nodes in your private cloud
- ✓Custom data retention and audit log policies
- ✓Dedicated support SLA and change-management windows
Full On-Premises (GOV Edition)
Air-gap readyEvery Pentesterra component - API, console, workers, scanner nodes - runs inside your data center. Zero external connectivity required.
- ✓No traffic leaves the premises - ever
- ✓Offline KB and CVE update channels
- ✓Supports air-gapped and classified environments
- ✓Enhanced toolsets available under GOV contract
- ✓Meets national and sectoral standards for sovereign deployments
Use Cases
Internal network coverage
Scan LAN segments, AD domains, and internal services that cloud-only tools can't reach. Scanner nodes sit inside the network and report to the central console.
Regulated and compliance-driven environments
Keep sensitive scan data and findings on-premises. Full audit trails, per-cycle evidence packages, and compliance reports never leave your infrastructure.
Air-gapped and classified networks
The GOV Edition runs with no internet dependency. Update channels can be delivered via portable media for networks with strict connectivity controls.
OT and critical infrastructure
Deploy scanner nodes with conservative scan profiles for OT segments. Passive reconnaissance mode minimises probe traffic on sensitive control networks.