PentaTrail
Maps internet-facing assets via DNS, certificate logs and WHOIS, then validates findings with Nuclei scans and ranks them by CVSS, EPSS and KEV.
not read yet
Use
- For
- IT and security teams tracking internet-facing assets and exposures across cloud providers
- Price
- Price not readpricing page, read 2026-10-12 ↗
- Activity
- Actively maintainedsite updated 2 weeks ago
- Company
- founding year not on record
- discover internet-facing assets from IP, DNS and WHOIS data
- prioritise exposures using CVSS, EPSS and KEV scores
- validate findings and track remediation across scope
- Certifications they stateSOC 2 Type II · ISO 27001 · PCI DSSsecurity page ↗
These are PentaTrail's own statements, read from its pages. We did not audit them. A line that is missing was not found on the pages we read; it does not mean the practice is absent.
- MCP serverco.pentatrail/ctemverified in the MCP registry
- Stateanswers, requires sign-inchecked 2026-10-13
- Address to connectapi.pentatrail.co/mcp
- MCP docspentatrail.co/docs/mcpthe vendor's page ↗
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
What is PentaTrail?
Maps internet-facing assets via DNS, certificate logs and WHOIS, then validates findings with Nuclei scans and ranks them by CVSS, EPSS and KEV.
Who is PentaTrail for?
IT and security teams tracking internet-facing assets and exposures across cloud providers
Is PentaTrail free?
No. Its pricing page showed no free plan on 2026-10-12.
Do people use PentaTrail?
Little sign of use.
Is PentaTrail still maintained?
Actively maintained: site updated 2 weeks ago.
Is PentaTrail safe?
We do not audit vendors. What PentaTrail publishes, read 2026-10-12: SOC 2 Type II, ISO 27001, PCI DSS stated on its security page.
Not quite it? Describe the job
betaFive tools from the Atlas that fit it, each judged against what you wrote.
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.