Vonahi Security

What Vonahi Security does

Vonahi Security, founded in 2018 by Alton Johnson and headquartered in Atlanta, Georgia, is a cybersecurity company that built vPenTest, an automated network penetration testing SaaS platform that replicates the methodology of manual internal and external penetration tests — including vulnerability identification, exploitation, man-in-the-middle attacks, password hash cracking, privilege escalation, and data discovery. The platform is differentiated by on-demand scheduling (monthly or continuous versus annual manual engagements), real-time activity logging that correlates with SIEM and incident response, automated report generation within 48 hours, AI-enhanced executive summaries and executive-ready PowerPoint presentations, and a vPenTest API for programmatic access. The company holds SOC 2 Type II certification and CREST accreditation in both EMEA and Australasia, making it one of approximately 300 CREST-accredited providers globally.

Vonahi operates as a wholly-owned subsidiary of Kaseya following its April 2023 acquisition announced at Kaseya Connect Global, and vPenTest is now marketed as part of the Kaseya Security Suite within IT Complete 2.0. The company serves three primary segments: Managed Service Providers (MSPs) reselling pentesting to SMB clients and bundling it with services such as MDR; internal IT/security teams at organizations seeking an affordable alternative to outsourced consultants; and regulated industries (healthcare, financial services, government, education) requiring compliance documentation for PCI, HIPAA, SOC 2, and cyber insurance. Named customers and partners include Dark Rhino Security, Insurwave, Port53, AvTek Solutions, ETTE, DP Tech Group, Greene County General Hospital, HadenGrey, Kishmish, and Regal Cinemas.

The business model is a monthly subscription SaaS priced via custom quote, distributed through a hybrid motion: self-serve PLG on the vPenTest platform, MSP channel partners, the ConnectWise Marketplace, and direct enterprise sales. Distribution is amplified by integrations with Autotask (scheduled April 2026) and ConnectWise Manage for automated ticketing, Dark Web ID for compromised-credential-aware testing, and SIEM platforms for activity log correlation. Marketing emphasizes channel-led growth through industry conferences (CompTIA ChannelCon, DattoCon, Kaseya Connect Global, IT Nation Connect, MSPGeekCon, ASCII Events), educational content, G2 reviews, and three consecutive years of recognition on the Gartner Hype Cycle for Security Operations as a Sample Vendor in the Automated Penetration Test and Red Teaming Tool category.

Name

Vonahi Security

Legal name

Vonahi, LLC

Website

https://vonahi.io

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

11–50 employees

Short description

Vonahi Security, a Kaseya subsidiary founded in 2018 and based in Atlanta, operates vPenTest, an automated network penetration testing SaaS platform that delivers on-demand internal and external pentests for managed service providers and internal IT teams at over 60% lower cost than manual consulting engagements.

Ownership category

akta.pro rank

Product category

Network Penetration Testing Software

NAICS

Testing Laboratories and Services (541380), Testing Laboratories and Services (54138)

SIC

Services-Testing Laboratories (8734), Services-Computer Programming Services (7371)

akta.pro industry

PRIMARYHDADAHAG

Penetration Testing Platforms (PTaaS)

Hardware, Technology & Telecom/Cybersecurity/Vulnerability & Exposure Management (VM, ASM, BAS)

SECONDARYBPAEADAD

Vulnerability Management & Penetration Testing Services

Business & Public Services/IT & Digital Services (Managed Services, Systems Integration)/Cybersecurity Services (MSSP)

SECONDARYBPAKAHAG

Vulnerability Assessment, Security Audits & Compliance Testing

Business & Public Services/Security & Investigations Services/Cybersecurity & Digital Forensics Services

Keywords

• Network penetration testing
• Automated security testing
• Cybersecurity SaaS platform
• Vulnerability assessment software
• Penetration testing automation

Headquarters

HQ city

Atlanta

HQ country

United States

HQ region

North America

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Operations, Marketing or Sales, Infrastructure

Revenue model

1. vPenTest SaaS Subscription: Automated network penetration testing platform delivered as SaaS. Pricing designed to be flexible and scalable for MSPs managing multiple clients and IT teams securing their own organizations. Customers deploy an agent and schedule assessments on-demand.

Pricing tiers

Go-to-market motion4 records

Distribution channels5 records

Marketing channels9 records

Core offering

Vonahi Security offers vPenTest, an automated network penetration testing SaaS platform that replicates manual internal and external network penetration testing methodology — including vulnerability identification, exploitation, man-in-the-middle attacks, password hash cracking, privilege escalation, and data discovery. Customers deploy an agent, schedule on-demand assessments, and receive detailed PDF reports within 48 hours, enabling continuous or monthly testing at over 60% lower cost than traditional manual penetration testing.

Product overview

Vonahi Security offers a single unified product called vPenTest - an automated network penetration testing SaaS platform. Founded in 2018, the company pioneered automated network penetration testing and was acquired by Kaseya in April 2023. vPenTest enables organizations to perform both internal and external network penetration testing on-demand, on a continuous basis (monthly or as new threats emerge), at over 60% less cost than traditional manual penetration testing. Reports are delivered within 48 hours. The platform is designed for MSPs serving SMB clients and internal IT teams, with features including real-time monitoring, activity logging, AI-enhanced executive summaries, automated PowerPoint presentations, Autotask integration, Dark Web ID integration, and CREST-certified testing. The solution meets compliance requirements for PCI, HIPAA, SOC2, and cyber insurance.

Differentiator

Problem solved

Functional benefit

Brands

• vPenTest: The industry's leading automated network penetration testing SaaS platform that streamlines the delivery of network pentesting for MSPs and internal IT teams. It provides internal and external network penetration testing with real-time monitoring, compliance reporting for PCI, HIPAA, SOC2, and cyber insurance requirements.

Products and services

• vPenTest Automated network penetration testing SaaS platform that performs internal and external network penetration tests on-demand, including vulnerability identification, exploitation, man-in-the-middle attacks, password hash cracking, privilege escalation, and data discovery. Delivers detailed PDF reports within 48 hours and enables monthly or continuous testing at over 60% lower cost than traditional manual penetration testing. Designed for managed service providers serving SMB clients and for internal IT and security teams at enterprises, with integrations to Autotask, ConnectWise Manage, Dark Web ID, and SIEM platforms, AI-enhanced executive summaries, and CREST-certified reports for EMEA and Australasia.

Quantifiable outcome

• Over 60% cost reduction compared to traditional manual network penetration testing
• +4 more outcomes

Named customers10 records

Segments7 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration5 records

AI capability2 records

Feature11 records

Partnerships

Three partnerships are on record, tiered core.

• AutotaskcoreTechnology or Integration · 1 April 2026Autotask integration automatically creates and manages tickets for every vPenTest finding, closing the gap between discovery and remediation so nothing is missed.
• CRESTcoreStrategic or Co-development Partner · 12 June 2024CREST (Council for Registered Ethical Security Testers) accreditation validates Vonahi's testing methods, data security, and business processes. Vonahi is among only 300 CREST-accredited cybersecurity providers globally. Accreditation covers EMEA and Australasia regions.
• ConnectWisecoreTechnology or Integration · 8 November 2022ConnectWise Marketplace integration enables immediate ticket creation when a finding is added to a vPenTest assessment. Vonahi was also a ConnectWise PitchIT Finalist in 2022.

Scale indicators8 records

Recent moves8 records

Expansion highlights6 records

Direct peers

• CyCognito: CyCognito combines external attack surface management with automated penetration testing to discover and validate exposures across internet-facing assets. It is comparable to vPenTest in the automated pentest category, with an emphasis on external attack surface.
• Bugcrowd: Bugcrowd runs a crowdsourced pentest and bug bounty platform connecting organizations to a global researcher community. It is a direct alternative to vPenTest for buyers seeking on-demand security testing, particularly for application-layer and external testing.
• Pentera: Pentera offers an automated security validation platform that performs continuous, agentless penetration testing across network and cloud environments. It is the closest direct competitor to vPenTest in automated network pentesting, with a similar value proposition of replacing manual consultants with on-demand testing.
• Cobalt.io: Cobalt.io is a PTaaS platform combining a vetted crowd of human testers with automation and workflow tooling. It targets the same modern pentest buyer as vPenTest but with a hybrid human+automation model.
• Horizon3.ai: Horizon3.ai provides autonomous penetration testing (NodeZero) that identifies and exploits vulnerabilities across internal, external, and cloud environments. It competes head-to-head with vPenTest on automated, on-demand pentest positioning and enterprise IT buyer.
• SafeBreach: SafeBreach provides a BAS platform that simulates attack scenarios to validate security controls and prioritize remediation. It is adjacent and overlapping with vPenTest on automated offensive security testing, particularly for enterprise SOC and risk teams.
• AttackIQ: AttackIQ delivers a breach and attack simulation (BAS) platform that continuously validates security controls via automated adversary emulation. It overlaps with vPenTest on automated offensive testing for security validation and SOC optimization.

Broad incumbents

• Tenable: Tenable is a broad cybersecurity incumbent best known for Nessus and Tenable One (exposure management). It competes in vulnerability assessment and security testing more broadly, providing an alternative for buyers considering a single platform for vulnerability and pentest-adjacent workflows.
• Rapid7: Rapid7 offers vulnerability management (InsightVM), penetration testing services, and orchestration through Metasploit. It is a broad incumbent in the vulnerability and offensive security space that overlaps with vPenTest on automated network testing, but as part of a much wider portfolio.

Emerging players

• NopSec: NopSec provides vulnerability risk management and continuous penetration testing as a managed service. It targets the same IT security and MSSP buyer as vPenTest with a service-heavy, results-oriented model.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/vonahisec
• GitHubgithub.com/vonahisec
• Facebookfacebook.com/vonahisec
• LinkedInlinkedin.com/company/vonahisec

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles9 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Vonahi Security