Core Impact
6.1#15 in penetration testing softwareFrom $9,450 a yearAPISelf-hostedWindows
VisitCore Impact vs Dradis
What both publish
| Fact | Core Impact | Dradis |
|---|---|---|
| Automation | Rapid Penetration Tests are preconfigured sequences that automate common testing scenarios and include step-by-step guidance. | Dradis provides a REST API, webhooks, and a rules engine for integrating tools and automating workflows. |
| Integrations | Named integrations include Cobalt Strike, Metasploit, PowerShell Empire, Plextrac, and vulnerability scanners such as Fortra VM, Nessus, and Burp Suite. | Dradis lists 47+ scanner, ticketing, and SSO integrations, including Nessus, Burp Suite, Nmap, Qualys, Jira, and Okta. |
| Intended users | The maker says security teams of any experience level can use Core Impact, with guided setups for new users and automation for advanced users. | Assess is presented for teams that deliver findings, while Remediate is for internal security teams that also track fixes. |
| Purpose | Core Impact is penetration testing software for safely uncovering and exploiting security weaknesses. | Dradis supports security assessment work from engagement kickoff and collaboration through reporting, remediation, and workflow automation. |
| Reporting | The product generates reports to help plan and prioritize remediation, including reports mapped to compliance requirements. | Dradis uses structured data, templates, and automation to produce consistent assessment deliverables. |
| Support | Basic and Pro include customer portal and email support; Enterprise includes phone, customer portal, and email support. | Paid plans include email and live chat support, and Community Edition users can ask questions on the forum. |
Core Impact plans
- Core Impact Basic$9,450 a year
- Core Impact Pro$12,600 a year
- Core Impact EnterprisePriced on request
Dradis plans
- Community EditionFree
- Assess$3,600 a year
- Remediate$7,200 a year
- EnterprisePriced on request
Pick Core Impact if…
You want what its maker publishes above — check its page for the details.
Pick Dradis if…
Dradis suits security assessment teams that need to collaborate on findings, apply defined methodologies, and produce structured reports. Internal security teams that also need to track remediation can consider Remediate, while teams delivering assessments can consider Assess.