Skip to content
PentaTrail logo

PentaTrail

Maps internet-facing assets via DNS, certificate logs and WHOIS, then validates findings with Nuclei scans and ranks them by CVSS, EPSS and KEV.

At a glanceswept 2026-10-12

not read yet

Use

For
IT and security teams tracking internet-facing assets and exposures across cloud providers
Activity
Actively maintainedsite updated 2 weeks ago
Company
founding year not on record
What people do with itread off pentatrail.co on 2026-10-12
  • discover internet-facing assets from IP, DNS and WHOIS data
  • prioritise exposures using CVSS, EPSS and KEV scores
  • validate findings and track remediation across scope
Your datawhat they publish, each line with its page · read 2026-10-12

These are PentaTrail's own statements, read from its pages. We did not audit them. A line that is missing was not found on the pages we read; it does not mean the practice is absent.

How a program reaches itfound, not claimed · read 2026-10-13
  • MCP serverco.pentatrail/ctemverified in the MCP registry
  • Stateanswers, requires sign-inchecked 2026-10-13
  • Address to connectapi.pentatrail.co/mcp
  • MCP docspentatrail.co/docs/mcpthe vendor's page ↗

MCP server details →

Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.

Questions this page answers
  • What is PentaTrail?

    Maps internet-facing assets via DNS, certificate logs and WHOIS, then validates findings with Nuclei scans and ranks them by CVSS, EPSS and KEV.

  • Who is PentaTrail for?

    IT and security teams tracking internet-facing assets and exposures across cloud providers

  • Is PentaTrail free?

    No. Its pricing page showed no free plan on 2026-10-12.

  • Do people use PentaTrail?

    Little sign of use.

  • Is PentaTrail still maintained?

    Actively maintained: site updated 2 weeks ago.

  • Is PentaTrail safe?

    We do not audit vendors. What PentaTrail publishes, read 2026-10-12: SOC 2 Type II, ISO 27001, PCI DSS stated on its security page.

Not quite it? Describe the job

beta

Five tools from the Atlas that fit it, each judged against what you wrote.

How we read a tool

No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.

  • Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
  • Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
  • Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
  • The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.

How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.