Metasploit Framework

Open source

Open-source penetration testing framework with a large library of exploits and post-exploitation modules.

Pricing: free
Free tier: true
License: open-source
Open source: Yes

Editorial review

Metasploit Framework has not yet been editorially reviewed. User reviews and published field data below are unaffected — we say so rather than implying an editorial verdict.

Facts & attributes

Every value carries its evidence state. “—” means unknown — never a silent default (P-02).

Identity · Taxonomy

Documentation(HTTPS URL): https://docs.metasploit.com/Verified
Tags(open-source;cloud-native): penetration-testing, exploitation-framework, offensive-security, red-team, vulnerability-managementVerification pending

Platform · Deployment

Delivery model(SaaS;self-hosted;desktop;mobile;embedded;managed-cloud;appliance): desktopVerification pending

Pricing · Licensing

Free plan(true/false): trueVerification pending
License model(proprietary;open-source;source-available;dual-license): open-sourceVerified
Pricing model(free;subscription;usage;seat;asset;transaction;revenue-share;perpetual;custom): freeVerified
Source repository(HTTPS URL): https://github.com/rapid7/metasploit-frameworkVerified
SPDX license IDs(Apache-2.0;MIT): BSD-3-ClauseVerified

Features · Product · Fit

Core capabilities(authoring;automation;analytics): Exploit modules for verifying vulnerabilities, Auxiliary modules and payload handling, Security assessment management, Weekly module updates from the open source community and Rapid7Verification pending

Audience · Use · Case

Best for(Neutral editorial summary): Security teams running penetration tests with the world's most used exploitation frameworkVerification pending
Primary use cases(build;monitor;automate): Penetration testing, Vulnerability verification, Security assessmentsVerification pending
Skill level(beginner;intermediate;advanced;specialist): specialistVerification pending

Lifecycle · Versioning

Maintenance status(active;maintenance;deprecated;EOL;archived): activeVerification pending

Vendor · Maintainer

Vendor type(commercial;foundation;community;government;consortium;individual): commercialVerified

User reviews

Review policy

No published reviews yet.