Top Sites>NNetSPI - Proactive Cyber Security | PTaaS, ASM, BAS

User-agent: *
Allow: /wp-admin/admin-ajax.php
Allow: /*/*.css
Allow: /*/*.js
Disallow: /wp-admin/
Disallow: /wp-includes/
Disallow: /readme.html
Disallow: /license.txt
Disallow: /xmlrpc.php
Disallow: /wp-login.php
Disallow: /wp-register.php
Disallow: */disclaimer/*
Disallow: *?attachment_id=
Disallow: /privacy-policy

# This robots.txt file was created by Better Robots.txt (Index & Rank Booster by Pagup) Plugin. https://www.better-robots.com/

# NetSPI: The Proactive Security Solution

> NetSPI is the proactive security solution used to discover, prioritize, and remediate security vulnerabilities of the highest importance\. Schedule a demo\.

Generated by Yoast SEO v27.4, this is an llms.txt file, meant for consumption by LLMs.

## Pages
- [About Us](https://www.netspi.com/about-us/)
- [Contact Us](https://www.netspi.com/contact/)
- [Privacy Policy](https://www.netspi.com/privacy/)
- [PTaaS](https://www.netspi.com/netspi-ptaas/)
- [Applications](https://www.netspi.com/netspi-ptaas/application-penetration-testing/)
- [Network](https://www.netspi.com/netspi-ptaas/network-penetration-testing/)
- [PTaaS Feature \- Cloud Pentesting](https://www.netspi.com/netspi-ptaas/cloud-penetration-testing/)
- [PTaaS Feature \- Hardware Systems](https://www.netspi.com/netspi-ptaas/hardware-systems/)
- [Mainframe](https://www.netspi.com/netspi-ptaas/network-penetration-testing/mainframe/)
- [Web App](https://www.netspi.com/netspi-ptaas/application-penetration-testing/web-application/)
- [API](https://www.netspi.com/netspi-ptaas/application-penetration-testing/api/)
- [Sub\-Feature \- External Network](https://www.netspi.com/netspi-ptaas/network-penetration-testing/external-network/)
- [Attack Surface Visibility](https://www.netspi.com/attack-surface-visibility/)
- [Dark Web Monitoring](https://www.netspi.com/attack-surface-visibility/dark-web-monitoring/)
- [Domain Monitoring](https://www.netspi.com/attack-surface-visibility/domain-monitoring/)
- [Detective Controls Testing](https://www.netspi.com/security-assessments/detective-controls-testing/)
- [PTaaS Feature \- Red Team Operations](https://www.netspi.com/netspi-ptaas/red-team-operations/)
- [Social Engineering](https://www.netspi.com/netspi-ptaas/social-engineering/)
- [Customer Stories](https://www.netspi.com/customer-stories/)
- [Technical Blog](https://www.netspi.com/blog/technical-blog/)
- [PTaaS Feature \- AI/ML Pentesting](https://www.netspi.com/netspi-ptaas/ai-ml-penetration-testing/)
- [The NetSPI Platform](https://www.netspi.com/the-netspi-platform/)
- [Vulnerability Prioritization](https://www.netspi.com/vulnerability-prioritization/)
- [Security Assessments](https://www.netspi.com/security-assessments/)

## Posts
- [Walking Through an Attack Path with ForceHound](https://www.netspi.com/blog/technical-blog/web-application-pentesting/walking-through-an-attack-path-with-forcehound/): In Part 2 of the series, Weylon covers how to use ForceHound to visualize Salesforce attack paths in BloodHound CE, identify transitive privilege escalation, and legacy Connected App exposures\.
- [Auditing Salesforce Permission Hierarchies with ForceHound ](https://www.netspi.com/blog/technical-blog/web-application-pentesting/auditing-salesforce-permission-hierarchies-with-forcehound/):  Discover how ForceHound automates the collection of profiles, permission sets, and connected apps to reveal the true trust boundaries of your Salesforce organization\.
- [Q1 2026 Critical Vulnerability Roundup: Mitigating Risk](https://www.netspi.com/blog/executive-blog/vulnerability-management/q1-2026-critical-vulnerability-roundup-mitigating-risk/): Discover the top critical vulnerabilities of 2026 identified by Team NetSPI and learn how proactive security measures can protect your strategic business initiatives\.
- [Anthropic's Mythos Announcement: What it Means for Security Teams](https://www.netspi.com/blog/executive-blog/ai-ml-pentesting/anthropics-mythos-announcement-what-it-means-for-security-teams/): Anthropic's Mythos accelerates automated vulnerability discovery\. Read how to mitigate risk with custom benchmarks and human verification in your workflows\.
- [Regulatory\-Ready Security: Ensuring FCC Compliance for Routers](https://www.netspi.com/blog/executive-blog/hardware-and-embedded-systems-penetration-testing/regulatory-ready-security-ensuring-fcc-compliance-for-routers/): Last week, the FCC released a major update to the “Covered List”, officially adding foreign\-produced consumer\-grade routers to the registry of equipment deemed a threat to national security\. This declaration was in part due to the discovery of backdoors in select routers that used standard apps in an attack chain to create a backdoor into seemingly protected networks\. 

## Customer Stories
- [HumanGood Empowers IT Team to Reduce Network and Cloud Risk with NetSPI PTaaS](https://www.netspi.com/customer-stories/humangood-empowers-it-team-to-reduce-network-and-cloud-risk-with-netspi-ptaas/): HumanGood leverages the NetSPI platform and team to focus on their most critical vulnerabilities\.
- [Quantum Health: Redefining Benefits Navigation with Proactive Engagement and Cost Savings](https://www.netspi.com/customer-stories/quantum-health-11x-roi-with-netspi-detective-controls-testing/): By simulating real\-world ransomware attacks with Detective Controls Testing, Quantum Health saw 11x ROI and strengthened defenses\.
- [How NetSPI Helped Microsoft Build Trust in AI Security with a Framework That Delivers Results](https://www.netspi.com/customer-stories/how-netspi-helped-microsoft-build-trust-in-ai-security-with-a-framework-that-delivers-results/): How NetSPI Helped Microsoft Build Trust in AI Security with a Framework That Delivers Results\.
- [Everywhen Partners with NetSPI to Elevate TLPT Standards and Build Unparalleled Trust](https://www.netspi.com/customer-stories/everywhen-partners-with-netspi-to-elevate-tlpt-standards-and-build-unparalleled-trust/): NetSPI Red Team consultant's transparency, attention to detail, and commitment to building strong relationships make them feel like an integral part of your internal team, not just an external vendor\.
- [Nuspire partners with NetSPI to safeguard customer trust  ](https://www.netspi.com/customer-stories/managed-security-services-nuspire/): See how NetSPI led with the customer experience and continued innovation when partnering with Nuspire to safeguard customer trust\. 

## Events \& Webinars
- [NetDiligence Philadelphia](https://www.netspi.com/events-and-webinars/netdiligence-philadelphia-2024__trashed/): Join Team NetSPI at NetDiligence Cyber Risk Summit September 30\-October 2, 2024 in Philadelphia, Pennsylvania\. 
- [Mainframe in the Spotlight: Regulatory Pressures and Real\-World Attacks](https://www.netspi.com/events-and-webinars/mainframe-regulatory-pressures-and-real-world-attacks/): Enhance your mainframe security knowledge and ensure a future\-proof mainframe security posture with this webinar\.
- [Transformational CISO Assembly](https://www.netspi.com/events-and-webinars/transformational-ciso-assembly-austin-2024/): Meet NetSPI at the Transformational CISO Assembly – The Millennium Alliance on November 12\-13, 2024 at The Live in Austin, TX\.
- [Enterprise AI Security Transformation Assembly Europe](https://www.netspi.com/events-and-webinars/transformational-ciso-assembly-europe-2024/): Meet NetSPI at the Enterprise AI Security Transformation Assembly Europe on 19\-20 November at The Atzavara in Barcelona\!
- [Black Hat Europe](https://www.netspi.com/events-and-webinars/black-hat-europe-2024/): It's game on with NetSPI to level\-up with our Proactive Security Solutions\. Thanks for stopping by Stand 320; we'll see you next year\!

## News
- [When AI Starts Taking Action, Security Needs to Think Differently](https://www.netspi.com/newsroom/netspi-in-the-news/when-ai-starts-taking-action-security-needs-to-think-differently/): CIO Influence interviewed NetSPI's Field CISO, Nabil Hannan, for an April 6, 2026 article about how AI systems are evolving from generating outputs to taking autonomous actions, amplifying existing vulnerabilities and requiring organizations to adopt proactive security measures and robust governance to mitigate risks\. 
- [Proof Over Promises: A New Doctrine for Cybersecurity](https://www.netspi.com/newsroom/netspi-in-the-news/proof-over-promises-a-new-doctrine-for-cybersecurity/): As cyberattacks grow in frequency and sophistication, traditional assurances like contracts and certifications are no longer sufficient\. Instead, vendors must actively demonstrate their security resilience through measurable and continuous validation, such as penetration testing\. This proactive approach not only strengthens vendor\-customer relationships but also mitigates risks in an increasingly interconnected and vulnerable digital landscape\. 
- [March 31 is World Backup Day\. Here's How to Protect Your Data Now](https://www.netspi.com/newsroom/netspi-in-the-news/march-31-is-world-backup-day-heres-how-to-protect-your-data-now/): Forbes interviewed NetSPI's Field CISO, Nabil Hannan, for a March 31, 2026 article about World Backup Day and the importance of protecting data\. 
- [Minneapolis Cybersecurity Firm NetSPI Eyes $80M\-Plus Acquisitions to Fuel AI Push](https://www.netspi.com/newsroom/netspi-in-the-news/minneapolis-cybersecurity-firm-netspi-eyes-80m-plus-acquisitions-to-fuel-ai-push/): Minneapolis/St\. Paul Business Jounral interviewed NetSPI's President and CEO, Aaron Shilts, for an April 1, 2026 article about NetSPI pursuing acquisitions to expand its AI capabilities, enhance customer offerings, and maintain sustainable growth among evolving industry demands\.
- [The Age of Promises is Over, Vendors Must Now Lead with Evidence\-Based Assurances](https://www.netspi.com/newsroom/netspi-in-the-news/the-age-of-promises-is-over-vendors-must-now-lead-with-evidence-based-assurances/): In today’s evolving cyber threat landscape, traditional vendor assurances like contracts and periodic audits are no longer sufficient\. Sam Kirkman emphasizes the need for vendors to shift from trust\-based compliance to evidence\-based security, where measurable and continuous validation replaces outdated promises\.

## Podcasts
- [EPISODE 05 – Proactive Cloud Security: Mitigate Real Risks](https://www.netspi.com/podcast/episode-05-proactive-cloud-security-mitigate-real-risks/): In this episode of the Hack Responsibly podcast, NetSPI VP of Research Karl Fosaaen connects with Thomas Elling, Director of Cloud Penetration Testing\.
- [EPISODE 04 \- From Blue Team to Pentesting: Tools, Tales, and Techniques](https://www.netspi.com/podcast/episode-04-from-blue-team-to-pentesting-tools-tales-and-techniques/): In this episode, host Karl Fosaaen sits down with Paul Ryan, Senior Director of Application Security at NetSPI, to explore his journey in cybersecurity and his leadership in application pentesting\. Paul shares how his career evolved from IT and blue team roles to becoming a key figure in application security at NetSPI\. 
- [EPISODE 03 – The Hidden Risk in Legacy Infrastructure](https://www.netspi.com/podcast/episode-03-the-hidden-risk-in-legacy-infrastructure/): In this episode of the Hack Responsibly podcast, NetSPI VP of Research Karl Fosaaen connects with Phil Young, NetSPI Director of Mainframe Pentesting\. Known in the industry as "Soldier of Fortran," Phil is a leading authority on mainframe security\. 
- [EPISODE 02 – Securing the AI Frontier](https://www.netspi.com/podcast/episode-02-securing-the-ai-frontier/): In this episode of the Hack Responsibly podcast, NetSPI VP of Research Karl Fosaaen speaks with Kim Wiles, Director of AI Penetration Testing, about the unique security challenges posed by emerging AI technologies\.  
- [EPISODE 01 – Inside the Mind of a Social Engineer](https://www.netspi.com/podcast/episode-01-inside-the-mind-of-a-social-engineer/): In this episode of Hack Responsibly podcast, Patrick Sayler, Director of Social Engineering shares stories from his nearly decade\-long tenure at NetSPI\.

## Resources
- [API Security Best Practices](https://www.netspi.com/resources/ebooks-and-whitepapers/api-security-best-practices/): APIs are central to digital business
operations, and their rapid adoption
expands the attack surface, making
these targeted API security testing best practices essential\.
- [External Network Pentesting](https://www.netspi.com/resources/data-sheets/external-network-pentesting/): Secure your external networks against evolving threats with actionable insights discovered through expert\-led penetration testing\. 
- [How Secure are ATM Machines? An ATM Penetration Testing Expert Explains](https://www.netspi.com/resources/videos-and-livestreams/atm-security/): In this webinar, ATM penetration testing expert Larry "Patch" Trowell explains the steps you can take to protect your ATM systems from a cyberattack\.
- [Keeping Up with Medical Device Cybersecurity: Q\&A with Product Security Leaders at Medtronic, Abbott, and MITRE](https://www.netspi.com/resources/videos-and-livestreams/medical-device-cybersecurity/): Listen to medical device security leaders at Medtronic, Abbott, and MITRE share best practices for compliance, updatability, vulnerability management, and more\.
- [What You Need to Know to Start Implementing the FDA’s New Medical Device Security Requirements](https://www.netspi.com/resources/videos-and-livestreams/what-you-need-to-know-to-start-implementing-the-fdas-new-medical-device-security-requirements/): NetSPI Managing Director Ron Kuriscak and Abbott Senior Director of Cybersecurity Operations Steve Currie took an in\-depth look at the new requirements and pulled together a clear and actionable summary of what you need to know to stay agile while preparing for compliance\.

## Security Stories
- [Fake It Until You Make It: Using Deep Fakes to Bypass Voice Biometrics](https://www.netspi.com/security-story/bypassing-a-voice-biometrics-system-using-deepfakes/)
- [Full Source Code \& Config Credentials of a Healthcare Application](https://www.netspi.com/security-story/full-source-code-in-a-healthcare-application/)
- [Mind the Gap – Detective Control Validation for Financial Institution](https://www.netspi.com/security-story/mind-the-gap-detective-control-validation-with-bas/)
- [Kerberos Bronze Bit Attack: CVE\-2020\-17049 \- Practical Exploitation](https://www.netspi.com/security-story/kerberos-bronze-bit-attack/)
- [Not Your Average Bug Bounty: Compromise High Security Datacenter](https://www.netspi.com/security-story/not-your-average-bug-bounty/)

## Blog Types
- [Technical Blog](https://www.netspi.com/blog/technical-blog/)
- [Executive Blog](https://www.netspi.com/blog/executive-blog/)

## Optional
- [Sitemap index](https://www.netspi.com/sitemap_index.xml)