Exploitability, Proven Rather Than Assumed
AQUILA Sentinel is the offensive validation edition. It walks the path an attacker would walk, puts a business number on what a breach would cost, tests whether the defenders see it, and hands the findings to the people who have to fix them.
A Finding Is Not a Consequence.
Scanning produces a list. What the list does not say is which item an attacker would actually use, and what it would cost if they did.
A published score describes the vulnerability in general. It says nothing about whether it is reachable in this environment, behind these controls.
A penetration test is a photograph. The estate it photographed has changed by the time the report is read, and nothing re-tests it.
The test measures the attacker's path. Whether the detection set saw any of it is usually left unasked.
See It Live.
Sentinel's own world: the engagement surfaces feeding the offensive validation core, and the coverage and gaps it publishes up to AQUILA C4I.