eva‎lUATION OF PENETRATION TESTING TOOLS WITHIN THE ZERO TRUST FRAMEWORK

2/20/2026 12:00:00 AM

The fast changes in cyber threats an‎d the growing complexity of current business infrastructures have made the need for strict security eva‎luation methods even more urgent. Traditional penetration testing tools like Nmap are still widely used in cybersecurity, but the move toward Zero Trust Architecture (ZTA) makes it vital to ask whether they are still useful an‎d relevant. This thesis offers a thorough, empirically-based assessment of Nmap in relation to current security scanning tools namely Nessus Essentials, OpenVAS/GVM, an‎d the Metasploit Framework conducted in a regulated, multi-layered laboratory setting that embodies contemporary Zero Trust principles. The study methodically assesses each toolʹs performance across diverse scanning scenarios an‎d target systems using a cohesive eva‎luation framework that includes five criteria: accuracy of asset an‎d service discovery, contextual awareness, vulnerability identification, integration capabilities, an‎d reporting clarity. The results show that Nmap is still the best tool for basic reconnaissance, service enumeration, an‎d flexibility through its scripting engine. However, contemporary vulnerability scanners are better at host-level assessment an‎d giving meaningful reports. On the other han‎d, Metasploit is necessary for checking if something may be exploited an‎d for integrating tools into a chain. When put in the context of ZTA, the results show that no one tool is good enough for continuous verification, micro-segmentation analysis, an‎d identity-centric security eva‎luation. The study emphasizes the complementarity of technologies an‎d suggests an optimal methodology for penetration testing aligned with Zero Trust principles. The study provides a replicable eva‎luation approach, elucidates the practical utility of legacy reconnaissance techniques in contemporary infrastructures, an‎d presents evidence-based recommendations for security professionals, policymakers, an‎d educators.

Nmap , ، معماري Zero Trust , ، آزمايش نفوذ , اسكن آسيب‌پذيري

Nmap , Zero Trust Architecture , Penetration Testing , Vulnerability Scanning,

MUNDHER AL - JABERI

PROF. SAYD WAHEDI AZHARI