moving off pentera, what replaced it for full-stack exposure validation?

we need to expand beyond network testing to cover endpoints, identity, email security, WAF, and cloud workloads. Also looking for SIEM detection validation and remediation prioritization based on exploitability rather than CVSS scores.

For those who've moved away from pentera:

What platform did you go to, and did it improve coverage across the full stack or just shift the gaps?

How did the change impact your SecOps workflow, any surprises good or bad?

Not looking for perfection, just something that better reflects modern attack paths in a hybrid environment.

Thanks in advance!!