rapid7 and trustedsec develop professional penetration testing software rapid7 also sells a pro version of metasploit...my question is that if someone uses their software illegally how are those companies and developers not held responsible since they developed the hacking software(s)?


  • Penetration testing software has a legal, legitimate use. For example by using it on your own computer systems for actual penetration testing (as the name implies).
    – Brandin
    Jan 8, 2019 at 15:52
  • Please do not make edits that drastically alter the content of a question. If you have a separate question, ask it separately anew.
    – user4657
    Jan 13, 2019 at 8:33

1 Answer 1


Most products can be used for illegal purposes, so just selling something that is used for illegal activities can't incur such liability in general. There are exceptions, of course. If a product is clearly made for illegal activities and has little or no legal use, the supplier is likely to be liable. If a supplier produces something and markets it for illegal purposes, that's likely illegal.

In this case, penetration testing software has a clear legal use: security professionals using the software to test computer system security with permission from the system owner. Computer systems are complicated, and difficult to secure, so in many cases it's necessary to test to see if they're immune to normal hacking tools. Therefore, writing these tools and selling them to computer security people serves an important legal purpose.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .