IT managers currently have limited capability to assess real risk, technically validate the effectiveness of security products they use, and make intelligent IT security investment decisions. This IDC paper will discuss how penetration testing software can efficiently address all of these challenges. Penetration testing is an important addition to the VA&M portfolio in that it picks up where "scan and identify" products leave off, substantiating if theoretical threats to network security are real or not.

Penetration testing software provides the capability to test the overall IT security infrastructure and policies to ensure that an organization's security investments are working. This capability has become increasingly important because companies continue to spend more on solutions to protect their information assets and meet compliance regulations.