Top Free Dynamic Application Security Testing (DAST) Software - Page 2

How Many Dynamic Application Security Testing (DAST) Software Products Does G2 Track?

Total Products under this Category: 100

Category Stats (Oct 2026)

  • Average Rating: 4.58/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Astra Pentest (+0.28%) - Among all products in this category, Astra Pentest recorded the largest rating increase compared to last month

Last updated: October 14, 2026

How Does G2 Rank Dynamic Application Security Testing (DAST) Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 4,300+ Authentic Reviews
  • 100+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Dynamic Application Security Testing (DAST) Software

G2 Grid® for Dynamic Application Security Testing (DAST) Software plotting products by satisfaction and market presence

Highlighted products: HCL AppScan, Aikido Security, Astra Pentest, Burp Suite, Qodex.ai, Intruder, Invicti, and GitLab.

Underlying data: [Grid® JSON](https://www.g2.com/categories/dynamic-application-security-testing-dast/grids.json?focus%5B%5D=hcl-appscan&focus%5B%5D=aikido-security&focus%5B%5D=astra-pentest&focus%5B%5D=burp-suite&focus%5B%5D=qodex-ai&focus%5B%5D=intruder&focus%5B%5D=invicti&focus%5B%5D=gitlab)

Contrast Security

Contrast Security is the global leader in Application Detection and Response (ADR), empowering organizations to see and stop attacks on applications and APIs in real time. Contrast embeds patented threat sensors directly into the software, delivering unmatched visibility and protection. With continuous, real-time defense, Contrast uncovers hidden application layer risks that traditional solutions miss. Contrast’s powerful Runtime Security technology equips developers, AppSec teams and SecOps with one platform that proactively protects and defends applications and APIs against evolving threats.

Average Rating: 4.5/5.0

Total Reviews: 49

How Do G2 Users Rate Contrast Security?

  • Has the product been a good partner in doing business?: 9.0/10 (Category avg: 9.2/10)
  • API / Integrations: 8.7/10 (Category avg: 8.7/10)
  • Detection Rate: 8.2/10 (Category avg: 8.8/10)
  • Test Automation: 8.3/10 (Category avg: 8.8/10)

Who Is the Company Behind Contrast Security?

  • Seller: Contrast Security
  • Year Founded: 2014
  • HQ Location: Pleasanton, CA
  • Twitter: @contrastsec
    5,468 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    182 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Insurance, Information Technology and Services
  • Company Size: 67% Large, 20% Medium

What Do G2 Reviewers Say About Contrast Security?

AI-generated summary from verified user reviews

Pros
  • Users value the accuracy of findings from Contrast Security, ensuring greater precision in identifying vulnerabilities.
  • Users value the accuracy of results from Contrast Security, benefiting from precise vulnerability monitoring and analysis.
  • Users commend the real-time vulnerability detection of Contrast Security, appreciating its quick feedback and agile support.
Cons
  • Users experienced performance issues with Contrast Security, particularly with Java applications, but found support helpful in resolving them.

What Are Recent G2 Reviews of Contrast Security?

What Are G2 Users Discussing About Contrast Security?

Akto API Security Platform

Akto is a trusted platform for application security and product security teams to build an enterprise-grade API security program throughout their DevSecOps pipeline. Our industry-leading suite of — API discovery, API security posture management, sensitive data exposure, and API security testing solutions enables organizations to gain visibility in their API security posture. 1,000+ Application Security teams globally trust Akto for their API security needs. Akto use cases: 1. API Discovery 2. API Security Testing in CI/CD 3. API Security Posture Management 4. Authentication and Authorization Testing 5. Sensitive data Exposure 6. Shift left in DevSecOps

Average Rating: 4.5/5.0

Total Reviews: 54

How Do G2 Users Rate Akto API Security Platform?

  • Has the product been a good partner in doing business?: 9.1/10 (Category avg: 9.2/10)
  • API / Integrations: 9.0/10 (Category avg: 8.7/10)
  • Detection Rate: 8.1/10 (Category avg: 8.8/10)
  • Test Automation: 8.8/10 (Category avg: 8.8/10)

Who Is the Company Behind Akto API Security Platform?

  • Seller: Akto.io
  • Year Founded: 2022
  • HQ Location: San Francisco, California
  • Twitter: @Aktodotio
    1,357 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    29 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Financial Services, Information Technology and Services
  • Company Size: 44% Medium, 40% Small

What Do G2 Reviewers Say About Akto API Security Platform?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the user-friendly interface of Akto, finding the platform easy to navigate and manage projects.
  • Users praise Akto for its easy API security testing integration, seamlessly fitting into CI/CD pipelines and enhancing efficiency.
  • Users value the effortless integration of automation testing in Akto, enhancing efficiency within their CI/CD workflow.
  • Users praise Akto for its seamless integration with CI/CD pipelines, enhancing API security testing with minimal manual effort.
  • Users value the automated security testing capabilities of Akto API Security Platform, enhancing their API protection efforts.
Cons
  • Users find the complex initial setup challenging due to poor documentation and a steep learning curve.
  • Users find the documentation poor, making it challenging to configure advanced features effectively.
  • Users find that API issues hinder their experience, particularly due to a steep learning curve and complex configurations.
  • Users find the learning curve steep with Akto, especially for those unfamiliar with API security concepts and configurations.
  • Users find the setup complexity of Akto API Security Platform challenging due to poor documentation and steep learning curve.

What Are Recent G2 Reviews of Akto API Security Platform?

Detectify

Detectify sets a new standard for advanced application security testing, challenging traditional DAST by providing evolving coverage of each and every exposed asset across the changing attack surface. AppSec teams trust Detectify to expose how attackers will exploit their Internet-facing applications. The Detectify platform automates continuous real-world, payload-based attacks fuelled by its global community of elite ethical hackers into its own expert-built engines, exposing critical weaknesses before it's too late. The Detectify solution includes: - Automated discovery of known and unknown digital assets via domain & cloud connectors - Continuous coverage (24/7) of every corner of the attack surface with dynamic testing. Not just predefined targets - 100% payload-based testing fuelled by elite ethical hackers for a high signal-to-noise ratio - Distributed coverage across an unmatched array of relevant technologies - Actionable remediation tips for software development teams - Team functionality to easily share reports - Powerful integrations platform to prioritize and triage vulnerability findings onward to development teams -Advanced API functionality -Capabilities to set custom attack surface security policies

Average Rating: 4.5/5.0

Total Reviews: 49

How Do G2 Users Rate Detectify?

  • Has the product been a good partner in doing business?: 9.7/10 (Category avg: 9.2/10)
  • API / Integrations: 7.6/10 (Category avg: 8.7/10)
  • Detection Rate: 7.9/10 (Category avg: 8.8/10)
  • Test Automation: 9.0/10 (Category avg: 8.8/10)

Who Is the Company Behind Detectify?

  • Seller: Detectify
  • Year Founded: 2013
  • HQ Location: Stockholm, Sweden
  • Twitter: @detectify
    11,256 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    94 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 47% Small, 35% Medium

What Do G2 Reviewers Say About Detectify?

AI-generated summary from verified user reviews

Pros
  • Users praise Detectify for its automation capabilities, making security testing seamless and adaptable to existing workflows.
  • Users appreciate Detectify's automation testing capabilities, making security assessments easier and more efficient to manage.
  • Users appreciate the customizability of Detectify, enjoying its easy integration and tailored security testing options.
  • Users praise Detectify for its easy integration and comprehensive dynamic application security testing, enhancing security without complex setups.
  • Users value Detectify for its effective dynamic application security testing and seamless integration into existing workflows.
Cons
  • Users find the initial setup complex, which can create challenges in getting started with Detectify.
  • Users struggle with the complex queries in Detectify, which hinder understanding of the spidering outcomes and assessments.
  • Users find the complex setup of Detectify challenging, making initial use more difficult than expected.
  • Users find Detectify expensive when testing multiple sites, affecting its accessibility for wider use.
  • Users face inaccuracies in Detectify's spidering results, leading to uncertainty in thorough application assessments.

What Are Recent G2 Reviews of Detectify?

What Are G2 Users Discussing About Detectify?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works
Connect G2 to ChatGPTConnect G2 to Claude

StackHawk

StackHawk is reimagining AppSec for AI-driven development, where applications are built faster than traditional AppSec tools can keep up. Our AppSec Intelligence Platform combines scalable runtime testing with complete attack surface discovery from source code. We integrate directly into development workflows and provide context-aware remediations to developers, enabling teams to find and fix exploitable vulnerabilities before they reach production. With real-time visibility and centralized program intelligence, AppSec teams can prioritize testing and fixing what matters. Companies like British Airways, ITV, and Norstella trust StackHawk to evaluate application risk, prove program value, and scale testing coverage to match development velocity.

Average Rating: 4.6/5.0

Total Reviews: 67

How Do G2 Users Rate StackHawk?

  • Has the product been a good partner in doing business?: 9.1/10 (Category avg: 9.2/10)
  • API / Integrations: 8.8/10 (Category avg: 8.7/10)
  • Detection Rate: 8.1/10 (Category avg: 8.8/10)
  • Test Automation: 8.8/10 (Category avg: 8.8/10)

Who Is the Company Behind StackHawk?

  • Seller: StackHawk
  • Year Founded: 2019
  • HQ Location: Denver, CO
  • Twitter: @StackHawk
    1,137 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    28 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 46% Small, 35% Medium

What Do G2 Reviewers Say About StackHawk?

AI-generated summary from verified user reviews

Pros
  • Users value the easy integrations of StackHawk, facilitating seamless setups with major CI tools and configurations.
  • Users praise the excellent customer support from StackHawk, highlighting their responsiveness and helpfulness in addressing queries.
  • Users value the customizability of StackHawk, appreciating its flexibility and integration options for unique workflows.
  • Users find that StackHawk greatly enhances efficiency, enabling quicker identification and resolution of security vulnerabilities.
  • Users commend StackHawk for its scanning efficiency, enabling quick identification of vulnerabilities and seamless CI/CD integration.
Cons
  • Users find the complex setup challenging, particularly with the YAML configurations and onboarding processes for applications.
  • Users find the high learning curve of StackHawk challenging due to its complex scripting and setup process.
  • Users find StackHawk lacking features, specifically in API management and vulnerability reproducibility, hindering its usability.
  • Users find the limited scope of StackHawk restricts functionality and automation in vulnerability management.
  • Users find the setup complexity of StackHawk frustrating due to YAML configuration and onboarding challenges.

What Are Recent G2 Reviews of StackHawk?

What Are G2 Users Discussing About StackHawk?

Codacy

Codacy is the code quality and security platform for AI-assisted engineering teams. AI is now embedded through the engineering workflow, which has made teams faster, but also adds risk to everything they ship. Codacy helps AI-assisted teams ship high-quality, secure code across the full software development lifecycle, starting in the agent and editor, through pull requests in Git, and into containers and runtime security. At each stage we check for quality issues, security vulnerabilities and AI coding risk introduced into the codebase, and help devs and agent fix them effortlessly. A team's standards become automated guardrails that apply across every IDE, AI coding agent, and Pull Request. More than 250,000 developers rely on Codacy to keep quality and security stable as AI changes how software gets built. Add your repo and get your free scan report in minutes: https://codacy.com

Average Rating: 4.6/5.0

Total Reviews: 31

How Do G2 Users Rate Codacy?

  • Has the product been a good partner in doing business?: 9.1/10 (Category avg: 9.2/10)

Who Is the Company Behind Codacy?

  • Seller: Codacy
  • Year Founded: 2012
  • HQ Location: Lisbon, Lisboa
  • Twitter: @codacy
    5,002 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    61 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer Software
  • Company Size: 55% Small, 23% Large

What Do G2 Reviewers Say About Codacy?

AI-generated summary from verified user reviews

Pros
  • Users value the enhanced security features of Codacy, benefiting from integrated automation and insightful vulnerability management.
  • Users appreciate the integrated automation of Codacy, finding it easy to use and helpful for maintaining code quality.
  • Users find the out-of-the-box automation in Codacy to be user-friendly and effective for maintaining code quality.
  • Users value the high code quality provided by Codacy's integrated automation and effective static code analyses.
  • Users value the helpful customer support of Codacy, appreciating their immediate assistance during integration and security management.
Cons
  • Users find Codacy expensive at $19/month, which can be a barrier for smaller organizations.

What Are Recent G2 Reviews of Codacy?

OpenText Core Application Security

Fortify on Demand (FoD) is a complete Application Security as a Service solution. It offers an easy way to get started with the flexibility to scale. In addition to static and dynamic, Fortify on Demand covers in-depth mobile app security testing, open-source analysis, and vendor application security management. False positives are removed for every test and test results can be manually reviewed by application security experts.

Average Rating: 4.1/5.0

Total Reviews: 34

How Do G2 Users Rate OpenText Core Application Security?

  • Has the product been a good partner in doing business?: 9.0/10 (Category avg: 9.2/10)
  • API / Integrations: 8.3/10 (Category avg: 8.7/10)
  • Detection Rate: 8.9/10 (Category avg: 8.8/10)
  • Test Automation: 8.3/10 (Category avg: 8.8/10)

Who Is the Company Behind OpenText Core Application Security?

  • Seller: OpenText
  • Year Founded: 1991
  • HQ Location: Waterloo, ON
  • Twitter: @OpenText
    21,565 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    22,835 employees on LinkedIn®
  • Ownership: NASDAQ:OTEX

Who Uses This Product?

  • Top Industries: Information Technology and Services
  • Company Size: 41% Large, 32% Small

What Are Recent G2 Reviews of OpenText Core Application Security?

What Are G2 Users Discussing About OpenText Core Application Security?

SOOS

SOOS is the complete application security posture management platform. Scan your software for vulnerabilities, control the introduction of new dependencies, exclude unwanted license types, generate and manage Software Bill of Materials (SBOM), and fill out your compliance worksheets across all your teams. SOOS’s ASPM is a dynamic, comprehensive approach to safeguarding your application infrastructure from vulnerabilities across the Software Development Life Cycle (SDLC) and live deployments. Easy to integrate, all in one dashboard. SCA - Deep tree vulnerability scanning, license compliance, governance DAST - Automated Web & API vulnerability scanning Containers - Scan contents for vulnerabilities SAST - Analyze code for security vulnerabilities IaC - Cloud security coverage SBOMs - Create – monitor – manage

Average Rating: 4.6/5.0

Total Reviews: 42

How Do G2 Users Rate SOOS?

  • Has the product been a good partner in doing business?: 9.1/10 (Category avg: 9.2/10)
  • API / Integrations: 7.4/10 (Category avg: 8.7/10)
  • Detection Rate: 8.9/10 (Category avg: 8.8/10)
  • Test Automation: 9.4/10 (Category avg: 8.8/10)

Who Is the Company Behind SOOS?

  • Seller: SOOS
  • Year Founded: 2019
  • HQ Location: Winooski, US
  • Twitter: @soostech
    44 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    21 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 50% Medium, 43% Small

What Do G2 Reviewers Say About SOOS?

AI-generated summary from verified user reviews

Pros
  • Users commend the ease of use of SOOS, highlighting its user-friendly setup and supportive onboarding process.
  • Users value the easy integrations of SOOS, enhancing workflow without hindering developer efficiency.
  • Users appreciate the easy integrations of SOOS, enhancing workflow without hindering development processes.
  • Users highlight the awesome customer support from SOOS, enhancing the overall user experience during onboarding.
  • Users value the continuous vulnerability detection by SOOS, enhancing security and compliance without disrupting workflow.
Cons
  • Users note the need for inadequate reporting features, highlighting a lack of customization and richer options for analysis.
  • Users highlight poor reporting in SOOS, seeking better filtering and display options for vulnerability analysis.
  • Users find SOOS to be lacking features, particularly in reporting and user interface intuitiveness.
  • Users express concern over the lack of guidance in documentation and actionable recommendations for vulnerability remediation.
  • Users find the dashboard issues frustrating, as richer reporting and filtering options are lacking.

What Are Recent G2 Reviews of SOOS?

ZAP by Checkmarx

ZAP by Checkmarx, formerly known as Zed Attack Proxy , is a leading open-source web application security scanner designed to help developers, testers, and security professionals identify vulnerabilities in web applications. Actively maintained by a global community, ZAP offers both automated and manual testing capabilities, making it suitable for users with varying levels of security expertise. Key Features and Functionality: - Automated Security Scanning: ZAP provides simple, single-click automated scanning, enabling users to identify security flaws with ease. - Active and Passive Scanning: Utilizes both passive and active scanning techniques to uncover a wide range of security vulnerabilities. - Advanced User Controls: Offers tools like manual interception, fuzzing, and forced browsing for thorough penetration testing. - CI/CD Integration: Seamlessly integrates with Continuous Integration/Continuous Deployment pipelines, automating security testing within development workflows. - Cross-Platform Support: Compatible with Linux, Windows, and macOS operating systems. Primary Value and Problem Solved: ZAP by Checkmarx addresses the critical need for accessible and effective web application security testing. By offering a free, open-source solution with both automated and manual testing capabilities, ZAP empowers organizations to identify and remediate vulnerabilities early in the development lifecycle. Its integration with CI/CD pipelines ensures that security becomes an integral part of the development process, reducing the risk of security breaches and enhancing overall application security.

Average Rating: 4.7/5.0

Total Reviews: 13

How Do G2 Users Rate ZAP by Checkmarx?

  • API / Integrations: 6.7/10 (Category avg: 8.7/10)
  • Detection Rate: 6.7/10 (Category avg: 8.8/10)
  • Test Automation: 6.7/10 (Category avg: 8.8/10)

Who Is the Company Behind ZAP by Checkmarx?

  • Seller: Checkmarx
  • Year Founded: 2006
  • HQ Location: Paramus, NJ
  • Twitter: @Checkmarx
    7,284 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    997 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer & Network Security
  • Company Size: 71% Small, 14% Medium

What Do G2 Reviewers Say About ZAP by Checkmarx?

AI-generated summary from verified user reviews

Pros
  • Users find ZAP's ease of use exceptional, making it perfect for both beginners and experienced security researchers.
  • Users appreciate the advanced automation features of ZAP, making web application security scanning efficient and user-friendly.
  • Users praise ZAP's exceptional automated testing features, highlighting its effectiveness in vulnerability assessments and integrations.
  • Users highlight the easy integrations with CI/CD tools, enhancing automation and usability for seamless development workflows.
  • Users find ZAP by Checkmarx enhances pentesting efficiency with its user-friendly interface and comprehensive automation features.
Cons
  • Users experience false positives that require manual intervention, complicating the review process for findings.
  • Users find the poor documentation for ZAP by Checkmarx lacking, especially during error troubleshooting.
  • Users note the limited automation scope in ZAP, lacking new features compared to other web pen testing tools.
  • Users often face navigation problems due to insufficient documentation and support, complicating their experience with ZAP.
  • Users express frustration over poor customer support and lack of documentation for ZAP by Checkmarx.

What Are Recent G2 Reviews of ZAP by Checkmarx?

Probely

Probely is a web vulnerability scanner that enables customers to easily test the security of their Web Applications & APIs. Our goal is to narrow the gap between development, security, and operations by making security an intrinsic characteristic of web applications development life-cycle, and only report security vulnerabilities that matter, false-positive free and with simple instructions on how to fix them. Probely allows Security teams to efficiently scale security testing by shifting security testing to Development or DevOps teams. We adapt to our customers’ internal processes and integrate Probely into their stack. Probely scan restful APIs, websites, and complex web applications, including rich Javascript applications such as single-page applications (SPA). It detects over 20,000 vulnerabilities, including SQL injection, Cross-Site Scripting (XSS), Log4j, OS Command Injection, and SSL/TLS issues.

Average Rating: 4.7/5.0

Total Reviews: 19

How Do G2 Users Rate Probely?

  • Has the product been a good partner in doing business?: 9.8/10 (Category avg: 9.2/10)
  • API / Integrations: 6.7/10 (Category avg: 8.7/10)
  • Detection Rate: 8.3/10 (Category avg: 8.8/10)
  • Test Automation: 8.3/10 (Category avg: 8.8/10)

Who Is the Company Behind Probely?

  • Seller: Probely
  • Year Founded: 2016
  • HQ Location: Porto, PT
  • Twitter: @probely
    527 Twitter followers
  • LinkedIn® Page: pt.linkedin.com
    3 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 47% Small, 37% Medium

What Are Recent G2 Reviews of Probely?

What Are G2 Users Discussing About Probely?

Appknox

Appknox is an on-demand mobile application security platform that helps businesses detect and fix security vulnerabilities using an Automated Security Testing suite. We have been successfully reducing delivery timelines, manpower costs & mitigating security threats for Global Banks and Enterprises in 10 + countries.

Average Rating: 4.4/5.0

Total Reviews: 41

How Do G2 Users Rate Appknox?

  • Has the product been a good partner in doing business?: 9.2/10 (Category avg: 9.2/10)
  • API / Integrations: 9.0/10 (Category avg: 8.7/10)
  • Detection Rate: 9.0/10 (Category avg: 8.8/10)
  • Test Automation: 8.9/10 (Category avg: 8.8/10)

Who Is the Company Behind Appknox?

  • Seller: Appknox
  • Year Founded: 2014
  • HQ Location: Singapore, Singapore
  • Twitter: @appknox
    3,055 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    84 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Financial Services
  • Company Size: 41% Small, 36% Medium

What Are Recent G2 Reviews of Appknox?

What Are G2 Users Discussing About Appknox?

Rainforest Application

Rainforest is the all-in-one cyber security platform with an end-to-end approach to simplify corporate reputation protection by using multiple intelligences and proactive observability, adding Application and Cloud Security (from DevOps to DevSecOps), Vulnerability Intelligence, and Brand reputation (Fraud and Leak monitoring). Rainforest Application, Rainforest Cloud, and Rainforest Asset modules allow development and security teams have visibility of all applications lifecycle, in a simple and quick way, providing vulnerability management always that a new line is coded. Rainforest Fraud, Rainforest Leak, and Rainforest Asset build an integrated vision of Vulnerability and Brand Intelligence, guiding security and compliance teams in an efficient manner on potential exposure points, according to their importance to the business regarding the company's reputation.

Average Rating: 4.9/5.0

Total Reviews: 12

How Do G2 Users Rate Rainforest Application?

  • Has the product been a good partner in doing business?: 9.8/10 (Category avg: 9.2/10)
  • API / Integrations: 8.7/10 (Category avg: 8.7/10)
  • Detection Rate: 8.7/10 (Category avg: 8.8/10)
  • Test Automation: 9.0/10 (Category avg: 8.8/10)

Who Is the Company Behind Rainforest Application?

Who Uses This Product?

  • Company Size: 42% Medium, 42% Small

What Are Recent G2 Reviews of Rainforest Application?

ImmuniWeb AI Platform

The ImmuniWeb AI Platform helps over 1,000 enterprise customers from more than 50 countries to test, secure and protect their web and mobile applications, APIs and microservices, cloud and networks, to prevent data breaches and reduce third-party risk, and to comply with regulatory requirements. ImmuniWeb’s products available on the Platform include Continuous Threat Exposure Management (CTEM), External Attack Surface Management (EASM), Dark Web Monitoring and phishing websites takedown, as well as vulnerability scanning and penetration testing for web and mobile apps, cloud and network infrastructure, and LLM models. Headquartered in Geneva, Switzerland, ImmuniWeb has offices in Washington, London and Dubai to provide an uninterrupted service to all global customers and partners.

Average Rating: 4.7/5.0

Total Reviews: 12

How Do G2 Users Rate ImmuniWeb AI Platform?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.2/10)

Who Is the Company Behind ImmuniWeb AI Platform?

  • Seller: ImmuniWeb
  • Year Founded: 2019
  • HQ Location: Geneva, CH
  • Twitter: @immuniweb
    8,473 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    32 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 92% Medium, 8% Small

What Do G2 Reviewers Say About ImmuniWeb AI Platform?

AI-generated summary from verified user reviews

Pros
  • Users value the effective vulnerability detection of ImmuniWeb AI Platform, significantly improving security and compliance efforts.
  • Users commend the responsive customer support, which offers prompt assistance and enhances the overall scanning experience.
  • Users value the continuous monitoring of the attack surface, ensuring proactive awareness of critical security issues.
  • Users value the continuous monitoring efficiency of ImmuniWeb AI Platform, ensuring proactive security and reducing potential losses.
  • Users value the alert notifications for keeping them informed about critical security issues and protecting their assets.
Cons
  • Users find the complexity of target scans leads to uncertain scanning times, complicating the overall experience.
  • Users face integration issues as ImmuniWeb AI Platform lacks connections with tools like Slack and PagerDuty.
  • Users find the lack of integration with Slack and PagerDuty complicates on-call support and accessibility after hours.
  • Users find the Excel export limited, which affects their data handling capabilities compared to the full JSON export.
  • Users note the limited flexibility in the algorithm for cost calculation, though improvements have been made.

What Are Recent G2 Reviews of ImmuniWeb AI Platform?

What Are G2 Users Discussing About ImmuniWeb AI Platform?

ResilientX Security Platform

ResilientX Unified Exposure Management Platform is the leading platform that unifies Attack Surface Management, Web Application Security Testing, Network Security Testing, Cloud Security Posture Management, and Third-Party Risk Management.

Average Rating: 5.0/5.0

Total Reviews: 17

How Do G2 Users Rate ResilientX Security Platform?

  • Has the product been a good partner in doing business?: 9.8/10 (Category avg: 9.2/10)
  • API / Integrations: 9.7/10 (Category avg: 8.7/10)
  • Detection Rate: 10.0/10 (Category avg: 8.8/10)
  • Test Automation: 10.0/10 (Category avg: 8.8/10)

Who Is the Company Behind ResilientX Security Platform?

  • Seller: ResilientX
  • Year Founded: 2022
  • HQ Location: London
  • Twitter: @ResilientXcyber
    33 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    12 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 47% Medium, 35% Small

What Do G2 Reviewers Say About ResilientX Security Platform?

AI-generated summary from verified user reviews

Pros
  • Users highly value the expert guidance and training from ResilientX, significantly enhancing their security posture.
  • Users value the human-powered comprehensive testing of ResilientX, ensuring thorough vulnerability detection and actionable recommendations.
  • Users appreciate the comprehensive vulnerability identification capabilities of ResilientX, enhancing security and user trust.
  • Users value the outstanding customer support from ResilientX, benefiting from expert guidance and training in security management.
  • Users appreciate the prompt attack detection alerts from ResilientX, enhancing their cybersecurity measures effectively.
Cons
  • Users find the complex setup of ResilientX challenging, especially for non-technical stakeholders during onboarding.
  • Users find difficult customization of dashboards challenging, especially for non-technical stakeholders, affecting overall user experience.
  • Users find the difficult initial setup of ResilientX Security Platform challenging, impacting the onboarding experience for teams.
  • Users notice integration issues with SIEM systems, hindering streamlined security operations within the platform.
  • Users desire improved integration with existing SIEM systems to enhance overall security operations and efficiency.

What Are Recent G2 Reviews of ResilientX Security Platform?

Threatspy

ThreatSpy is an Autonomous Application & API Security platform designed to help organizations discover, validate, prioritize, and remediate security vulnerabilities faster. Traditional security tools often generate large volumes of findings, leaving security and engineering teams to manually determine what is exploitable and what should be fixed first. ThreatSpy helps eliminate that noise by combining Dynamic Application Security Testing (DAST), API Security Testing, exploitability validation, reachability-based prioritization, and AI-assisted security review into a single workflow. ThreatSpy continuously evaluates web applications and APIs to identify both known vulnerabilities and hidden security weaknesses, helping teams focus on risks that have real business impact. The platform provides contextual remediation guidance, workflow integrations, and executive-level visibility to improve collaboration between security and development teams.

Average Rating: 4.7/5.0

Total Reviews: 24

How Do G2 Users Rate Threatspy?

  • Has the product been a good partner in doing business?: 9.4/10 (Category avg: 9.2/10)

Who Is the Company Behind Threatspy?

Who Uses This Product?

  • Top Industries: Information Technology and Services
  • Company Size: 42% Small, 42% Medium

What Do G2 Reviewers Say About Threatspy?

AI-generated summary from verified user reviews

Pros
  • Users value the proactive threat identification of Threatspy, enhancing security and streamlining workflow for teams.
  • Users find Threatspy's interface very easy to use, enabling effortless threat detection and management for everyone.
  • Users commend Threatspy for its proactive vulnerability identification, enabling early threat remediation and improved security efficiency.
  • Users highlight the helpful customer support of Threatspy, enhancing their experience in managing security vulnerabilities.
  • Users benefit from improved efficiency in security processes, allowing teams to focus on critical tasks and reduce alert fatigue.
Cons
  • Users find that limited customization in Threatspy restricts their ability to tailor scans to specific application needs.
  • Users express concern over poor customer support, which detracts from the overall value of Threatspy.
  • Users experience slow scanning, causing delays and inefficiencies during threat detection with Threatspy.
  • Users find that Threatspy has a limited capability in managing complex vulnerabilities, impacting tailored security assessments.

What Are Recent G2 Reviews of Threatspy?

HostedScan.com

HostedScan provides 24x7 alerts and detection for security vulnerabilities. Industry-standard, open-source, vulnerability scans. Automated alerts when something changes. Manage target list manually or import automatically from providers, such as AWS, DigitalOcean, and Linode, with read-only access. Manage and audit risks with dashboarding and reporting.

Average Rating: 4.3/5.0

Total Reviews: 13

How Do G2 Users Rate HostedScan.com?

  • Has the product been a good partner in doing business?: 8.3/10 (Category avg: 9.2/10)

Who Is the Company Behind HostedScan.com?

  • Seller: HostedScan
  • Year Founded: 2019
  • HQ Location: Seattle, Washington
  • Twitter: @hostedscan
    59 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    4 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 85% Small, 15% Medium

What Are Recent G2 Reviews of HostedScan.com?

Lauren Worth
LW
Researched and written by Lauren Worth
Updated October 3, 2024