Penetration test monitoring server and system

A penetration test monitoring system, comprising:

• an attacking host for performing a hacking exercise that launches attacks on a target website and generating a first attack report based on results of the attacks on the target website;
• a monitoring server electrically connected to the target website and the attacking host and including:
• a virtual platform includes one or more virtual machines, wherein the virtual platform carries software tools used by the attacking host to perform the hacking exercise and provides a virtual account for the attacking host to perform the hacking exercise on the target website through the virtual platform after logging in to said one or more virtual machines through the virtual account;
• and
• an analysis platform electrically corrected to the virtual platform, recording the hacking exercise executed on the virtual platform by the attacking host, and receiving the first attack report;
• a monitoring host electrically connected to the monitoring server and the attacking host, monitoring the attacking host, generating a second attack report based on the results of the attacks on the target website, and transmitting the second attack report to the analysis platform;
• and
• a risk assessment host that is electrical connected to the monitoring host, performing an After Action Review (AAR) according to the first attack report, the second attack report, and the results of the hacking exercise, and generating a comprehensive security report based on results of the AAR.