System and method for providing automated computer security compromise as a service

A system for providing automated computer security compromise as a service, running within a cloud computing environment, the system comprising:

• a web server having a web front end running on the web server, wherein users connect to the Web server via the Web front end, and wherein the Web server has stored therein pentest definitions created by the users through use of the Web front end;
• a command and control component which processes the pentest definitions, builds pentest task tickets and reporting task tickets, and monitors different portions of the system, wherein the portions of the system are selected from the group consisting of at least one penetration tester component and at least one report generator component,
• wherein the command and control component interacts with the cloud computing environment to scale up or down the number of penetration tester components and the number of report generator components, and assigns the task tickets to the penetration tester components and to the report generator components,
• at least one penetration tester component runs a penetration testing framework, the penetration testing component being able to run penetration testing modules available inside the penetration testing framework as instructed by the pentest task tickets built by the command and control component;
• at least one reporter generator component generates reports based on the reporting tasks tickets generated by the command and control service;
• and
• a central database for storing pentest results wherein results are isolated by the central database for each front end user.