# Best Penetration Testing Tools for Small Business - Page 2 *By [Lauren Worth](https://research.g2.com/insights/author/lauren-worth)* Products classified in the overall Penetration Testing category are similar in many regards and help companies of all sizes solve their business problems. However, small business features, pricing, setup, and installation differ from businesses of other sizes, which is why we match buyers to the right Small Business Penetration Testing to fit their needs. Compare product ratings based on reviews from enterprise users or connect with one of G2's buying advisors to find the right solutions within the Small Business Penetration Testing category. In addition to qualifying for inclusion in the Penetration Testing Tools category, to qualify for inclusion in the Small Business Penetration Testing Tools category, a product must have at least 10 reviews left by a reviewer from a small business. --- ## What Are the Most Common Questions About Penetration Testing Tools? *AI-generated · Last updated: May 26, 2026* ### What platform integrates penetration testing with security monitoring tools? Based on G2 reviews, several penetration testing platforms mention integrations that help security teams connect findings to their broader workflows. According to verified users, [Cobalt](https://www.g2.com/products/cobalt-io-cobalt/reviews) stands out for integrations with Slack, ticketing systems, APIs, and Google Sheets workflows, which reviewers say helps teams collaborate with testers and move findings into remediation faster. G2 reviewers also mention platforms like [Edgescan](https://www.g2.com/products/edgescan/reviews) and [Strobes Security](https://www.g2.com/products/strobes-security/reviews) for connecting with Jira and other security operations processes. Across reviews, buyers most often value integrations that reduce back-and-forth, keep findings visible, and support ongoing vulnerability tracking rather than one-time reporting. ### What platform provides compliance-focused penetration testing? Based on G2 reviews, compliance is a common reason buyers choose penetration testing tools, but [Cobalt](https://www.g2.com/products/cobalt-io-cobalt/reviews) appears most often in recent review data and is frequently described as helping teams meet annual testing, PCI, SOC 2, HIPAA, and broader audit requirements. According to verified users, reviewers value its straightforward reporting, retesting workflows, and support for external and internal assessments tied to compliance needs. G2 reviewers mention that it helps security teams demonstrate requirements to customers and auditors while giving developers findings they can act on. Reviews also note tradeoffs such as pricing and occasional variation in tester depth, but compliance support and easy-to-share reports are recurring strengths. ### Which vendor offers AI-powered threat simulation? Based on G2 reviews, [Pentera](https://www.g2.com/products/pentera/reviews) is the clearest fit for AI-powered threat simulation in this category. According to verified users, reviewers describe Pentera as automating attack simulation in a way that mimics real attackers, validates exploitable paths, and helps teams focus on real risk rather than broad vulnerability lists. G2 reviewers mention AI-driven insights, automated validation, and continuous testing as strengths that help security teams prioritize remediation and reduce manual effort. Some users also note setup complexity, reporting customization limits, or higher cost, but the reviews consistently frame Pentera as a platform built around automated attack emulation and validation rather than just traditional scanning. ### Which penetration testing platform offers the most comprehensive vulnerability coverage? Based on G2 reviews, buyers describe comprehensive coverage in different ways, including application, network, API, cloud, and continuous testing support. According to verified users, [Cobalt](https://www.g2.com/products/cobalt-io-cobalt/reviews) is praised for external and internal testing, application assessments, collaboration with testers, and retesting. G2 reviewers also highlight [Astra Pentest](https://www.g2.com/products/astra-pentest/reviews) for combining automated scanning with manual validation across web apps, APIs, and cloud-related findings, while [vPenTest](https://www.g2.com/products/vpentest/reviews) is often cited for broad automated internal and external coverage with clear reports. In reviews, the most comprehensive platforms tend to balance strong discovery, practical remediation guidance, and enough testing breadth to support both engineering and compliance goals. **Here are some of the top-rated products on G2:** - [Cobalt](https://www.g2.com/products/cobalt-io-cobalt/reviews) – often used for external, internal, application, and compliance-driven testing with collaborative remediation workflows - [vPenTest](https://www.g2.com/products/vpentest/reviews) – commonly used for automated internal and external testing with clear reporting for recurring assessments - [Astra Pentest](https://www.g2.com/products/astra-pentest/reviews) – frequently chosen for web app, API, and cloud-related testing with validated findings and responsive support ### What is the most affordable penetration testing software for SMBs? Based on G2 reviews, affordability for SMBs usually means faster setup, repeatable testing, and lower overhead than traditional engagements. According to verified users, [vPenTest](https://www.g2.com/products/vpentest/reviews) is often described as a cost-effective option for smaller businesses and MSPs because it supports recurring testing, clear customer-friendly reporting, and easier self-managed workflows. G2 reviewers mention that it helps teams test more frequently without the effort and delay of manual-only engagements. Reviewers also note that some findings may still need manual verification and that scan or report turnaround can vary, but the platform is repeatedly framed as strong value for teams that need practical security coverage on tighter budgets. **Here are some of the top-rated products on G2:** - [vPenTest](https://www.g2.com/products/vpentest/reviews) – often chosen by MSPs and smaller teams for affordable recurring internal and external testing - [Cobalt](https://www.g2.com/products/cobalt-io-cobalt/reviews) – reviewers describe it as reasonable for some use cases, especially when teams value reporting and tester collaboration - [Astra Pentest](https://www.g2.com/products/astra-pentest/reviews) – users often highlight strong value from validated findings, responsive support, and efficient remediation workflows ### Which vendor provides real-time penetration testing reports? Based on G2 reviews, [Cobalt](https://www.g2.com/products/cobalt-io-cobalt/reviews) is most consistently associated with real-time penetration testing visibility. According to verified users, reviewers say vulnerabilities appear in the dashboard as testers discover them, which allows teams to ask questions immediately, validate fixes faster, and keep remediation aligned with development work. G2 reviewers mention direct collaboration through the platform and Slack, plus continuous updates rather than waiting only for a final report. While some reviews note variability in tester quality or report interface improvements they would like to see, the recurring theme is immediate findings visibility and active communication during the engagement rather than delayed, static reporting. ### What is the top-rated penetration testing platform for enterprises? Based on G2 reviews, enterprise buyers tend to prioritize scalability, reporting, collaboration, and dependable remediation workflows. According to verified users, [Cobalt](https://www.g2.com/products/cobalt-io-cobalt/reviews) is the most visible choice in recent review data and is often described as fitting enterprise needs through real-time findings visibility, ticketing integrations, structured retesting, and support for recurring application and infrastructure testing. G2 reviewers mention that it works well for security teams that need to coordinate across engineering, compliance, and stakeholder reporting. Some users note pricing or scoping constraints, but reviews repeatedly describe Cobalt as a mature option for organizations managing larger programs and ongoing testing demands. **Here are some of the top-rated products on G2:** - [Cobalt](https://www.g2.com/products/cobalt-io-cobalt/reviews) – frequently used by larger teams for collaborative testing, retesting, and integration with engineering workflows - [Astra Pentest](https://www.g2.com/products/astra-pentest/reviews) – valued for dashboard visibility, manual-plus-automated testing, and structured support through remediation - [vPenTest](https://www.g2.com/products/vpentest/reviews) – used for scalable recurring assessments with strong reporting and self-managed scheduling ### Which tool supports penetration testing for cloud environments? Based on G2 reviews, several products are used for cloud-related penetration testing, but buyers often call out support for cloud apps, infrastructure visibility, and validation of cloud exposures. According to verified users, [Astra Pentest](https://www.g2.com/products/astra-pentest/reviews) is noted for cloud target integration and reviews that cover misconfigurations, exposed services, IAM gaps, and broader attack-surface visibility. G2 reviewers also mention [Intruder](https://www.g2.com/products/intruder/reviews) for scanning cloud resources across environments like AWS and Azure, and [Cobalt](https://www.g2.com/products/cobalt-io-cobalt/reviews) for cloud and web application tests scheduled around changing development needs. In reviews, the strongest cloud tools combine clear reporting with practical remediation guidance. ### What is the best tool for simulating cyberattacks? Based on G2 reviews, the best fit for cyberattack simulation depends on whether teams want validated attack paths, automation, or continuous testing. According to verified users, [Pentera](https://www.g2.com/products/pentera/reviews) is repeatedly described as simulating real attacker behavior, including lateral movement, validation of exploitable weaknesses, and clear attack-path organization. G2 reviewers mention that it helps teams understand real risk, reduce manual effort, and focus remediation on what is actually actionable. Reviews also note occasional concerns around installation complexity, reporting customization, or cost, but the product is consistently positioned as a strong option for organizations that want realistic attack simulation rather than basic vulnerability discovery alone. **Here are some of the top-rated products on G2:** - [Pentera](https://www.g2.com/products/pentera/reviews) – designed for attacker-style simulation with validated attack paths and remediation guidance - [NodeZero from Horizon3.ai](https://www.g2.com/products/nodezero-from-horizon3-ai/reviews) – used for automated attack-path testing and repeated validation after fixes - [RidgeBot](https://www.g2.com/products/ridgebot/reviews) – valued for simulating exploitability and helping teams prioritize risks based on validated impact ### Which solution supports both automated and manual penetration testing? Based on G2 reviews, [Astra Pentest](https://www.g2.com/products/astra-pentest/reviews) is strongly associated with combining automated scanning and manual penetration testing in one workflow. According to verified users, reviewers say this approach helps validate findings, reduce false positives, and keep teams focused on real issues instead of generic scanner output. G2 reviewers mention a unified dashboard, responsive support, and easier tracking of findings, remediation, and certification-related progress. Some users would like smoother onboarding or faster communication in certain cases, but the recurring review pattern is clear: Astra is chosen by teams that want the efficiency of automation alongside human verification and collaborative remediation support. ## G2 Grid® for Penetration Testing Tools ![G2 Grid® for Penetration Testing Tools plotting products by satisfaction and market presence](https://www.g2.com/categories/penetration-testing-tools/grids.png?focus%5B%5D=168853&focus%5B%5D=154599&focus%5B%5D=55515&focus%5B%5D=27706&focus%5B%5D=1333324&focus%5B%5D=1259627&focus%5B%5D=20259&focus%5B%5D=1312654) Highlighted products: vPenTest, Astra Pentest, Cobalt, Intruder, Oneleet, Aikido Security, Metasploit, and RidgeBot. Underlying data: [Grid® JSON](https://www.g2.com/categories/penetration-testing-tools/grids.json?focus%5B%5D=vpentest&focus%5B%5D=astra-pentest&focus%5B%5D=cobalt-io-cobalt&focus%5B%5D=intruder&focus%5B%5D=oneleet&focus%5B%5D=aikido-security&focus%5B%5D=metasploit&focus%5B%5D=ridgebot&segment=small-business) ## How Many Penetration Testing Tools Products Does G2 Track? **Total Products under this Category:** 135 ### Category Stats (Jul 2026) - **Average Rating**: 4.64/5 (↑0.02 vs Jun 2026) The average rating of products in this category, based on all submitted ratings - **Top Trending Product**: CybaOps (+8.33%) - Among all products in this category, CybaOps recorded the largest rating increase compared to last month *Last updated: July 16, 2026* ## How Does G2 Rank Penetration Testing Tools Products? **Why You Can Trust G2's Software Rankings:** - 30 Analysts and Data Experts - 3,400+ Authentic Reviews - 135+ Products - Unbiased Rankings G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category. ## Which Penetration Testing Tools Is Best for Your Use Case? - **Best for Small Businesses:** [vPenTest](https://www.g2.com/products/vpentest/reviews) - **Best for Mid-Market:** [Cobalt](https://www.g2.com/products/cobalt-io-cobalt/reviews) - **Best for Enterprise:** [Pentera](https://www.g2.com/products/pentera/reviews) - **Highest User Satisfaction:** [Oneleet](https://www.g2.com/products/oneleet/reviews) - **Best Free Software:** [vPenTest](https://www.g2.com/products/vpentest/reviews) --- **Sponsored** ### Hive Hive is an all-in-one project management software platform that helps teams plan, collaborate, automate workflows, and deliver projects faster. Designed for organizations of every size, Hive combines powerful project planning, task management, team collaboration, and workflow automation tools in one customizable workspace. Whether you're managing marketing campaigns, product launches, creative projects, client work, or cross-functional initiatives, Hive adapts to your team's unique processes. Unlike rigid project management tools, Hive offers flexible workflows, customizable dashboards, and multiple project views so every team can work the way they work best. Hive empowers marketing, operations, product, IT, creative, and remote teams with the tools they need to stay organized and aligned. With customizable workflows and powerful collaboration features, teams can centralize work, reduce manual tasks, and improve visibility across every project. Key capabilities include: - Multiple project views, including Kanban boards, Gantt charts, calendars, tables, and lists - Task management with custom fields, dependencies, milestones, and priorities - Workflow automation to eliminate repetitive work - Real-time team collaboration with messaging, comments, and file sharing - Time tracking, reporting, and analytics - Integrations with hundreds of popular business applications Every organization works differently, which is why Hive is built to be one of the most customizable project management platforms available. Teams can create workflows tailored to their business processes using custom fields, project templates, automations, approvals, and integrations. Instead of forcing teams to change how they work, Hive adapts to existing workflows — helping organizations improve efficiency without disrupting productivity. Hive gives teams the flexibility to manage projects from the perspective that works best for them. Switch seamlessly between: - Kanban boards for agile workflows - Gantt charts for timeline planning - Calendar views for scheduling - Table and List views for detailed task management These flexible project views help teams track deadlines, manage resources, identify bottlenecks, and keep projects moving forward. Hive brings projects, communication, and documentation together in one centralized workspace. Team members can collaborate in real time, assign tasks, share files, provide feedback, and monitor project progress without switching between multiple tools. By combining project planning, collaboration, automation, and reporting in a single platform, Hive helps teams reduce busywork and focus on delivering results. Hive is more than just task management software—it's a scalable work management platform built to evolve alongside your business. As your needs change, Hive continues to expand through new features, integrations, and customer-driven enhancements. With flexible customization, powerful automation, and dedicated customer support, Hive enables organizations to streamline workflows, improve cross-functional collaboration, and execute projects with greater speed and confidence. [Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list&secure%5Bcategory_id%5D=1519&secure%5Bchosen_at%5D=2026-07-16T17%3A58%3A04Z&secure%5Bdisplayable_resource_id%5D=2360&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=retargeted_product&secure%5Bplacement_resource_ids%5D%5B%5D=27036&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=27036&secure%5Bresource_id%5D=1519&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fpenetration-testing-tools%2Fsmall-business%3Fpage%3D2&secure%5Btoken%5D=b33d3cb95838ce7046eaba8d22a663a41e64c05e55e6a697e1cc7a66bca5944f&secure%5Burl%5D=https%3A%2F%2Fhive.com%2F&secure%5Burl_type%5D=company_website) --- ## What Are the Top-Rated Penetration Testing Tools Products in 2026? ### 1. [BugBase](https://www.g2.com/products/bugbase-bugbase/reviews) BugBase is a Continuous Vulnerability Assessment Platform that conducts comprehensive security operations such as bug bounty programs and next-gen pentesting (VAPT) to assist startups and enterprises in effectively identifying, managing and mitigating vulnerabilities. **Average Rating:** 4.5/5.0 **Total Reviews:** 46 **How Do G2 Users Rate BugBase?** - **Has the product been a good partner in doing business?:** 9.5/10 (Category avg: 9.4/10) - **Performance and Reliability:** 8.7/10 (Category avg: 9.1/10) - **Vulnerability Scan:** 9.1/10 (Category avg: 9.1/10) - **Extensibility:** 8.2/10 (Category avg: 8.7/10) **Who Is the Company Behind BugBase?** - **Seller:** [BugBase](https://www.g2.com/sellers/bugbase) - **Year Founded:** 2021 - **HQ Location:** Singapore, US - **Twitter:** @BugBase (1,673 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/bugbase/ (45 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Computer & Network Security, Computer Software - **Company Size:** 58% Small-Business, 23% Enterprise #### What Are BugBase's Pros and Cons? **Pros:** - Ease of Use (25 reviews) - User Interface (13 reviews) - Cybersecurity (10 reviews) - Features (10 reviews) - Easy Integrations (9 reviews) **Cons:** - Slow Performance (9 reviews) - Expensive (6 reviews) - Difficult Setup (5 reviews) - Learning Curve (5 reviews) - Poor Customer Support (4 reviews) ### What Do G2 Reviewers Say About BugBase? *AI-generated summary from verified user reviews* **Pros:** - Users find BugBase to be **extremely user-friendly** , making it an ideal choice for new bug bounty hunters. - Users love the **user-friendly interface** of BugBase, making it ideal for new bug bounty hunters. - Users value **enhanced security** with BugBase's exclusive bounty programs, ensuring confidentiality and reducing competition for rewards. - Users commend the **user-friendly interface and powerful features** of BugBase, enhancing project management and security measures. - Users value the **easy integrations** of BugBase, making it a user-friendly choice for managing diverse tools seamlessly. **Cons:** - Users experience **slow performance** on BugBase, including lagging and delayed responses, affecting their bug hunting experience. - Users find BugBase to be **expensive** , especially when compared to other bug bounty platforms like Bugcrowd. - Users find the **difficult setup** of BugBase challenging, especially for those lacking technical expertise. - Users find the **steep learning curve** challenging, particularly if they're not experienced with bug bounty programs. - Users report **poor customer support** on BugBase, leading to frustration and reduced motivation to hunt for bugs. #### What Are Recent G2 Reviews of BugBase? **"[Centralized Security and Seamless Integrations Boost Productivity](https://www.g2.com/survey_responses/bugbase-review-11939331)"** **Rating:** 4.5/5.0 stars *— Ronald B.* [Read full review](https://www.g2.com/survey_responses/bugbase-review-11939331) --- **"[Good Vapt and big bounty services](https://www.g2.com/survey_responses/bugbase-review-10751350)"** **Rating:** 4.0/5.0 stars *— Anamta Z.* [Read full review](https://www.g2.com/survey_responses/bugbase-review-10751350) --- ### 2. [Detectify](https://www.g2.com/products/detectify/reviews) Detectify sets a new standard for advanced application security testing, challenging traditional DAST by providing evolving coverage of each and every exposed asset across the changing attack surface. AppSec teams trust Detectify to expose how attackers will exploit their Internet-facing applications. The Detectify platform automates continuous real-world, payload-based attacks fuelled by its global community of elite ethical hackers into its own expert-built engines, exposing critical weaknesses before it's too late. The Detectify solution includes: - Automated discovery of known and unknown digital assets via domain & cloud connectors - Continuous coverage (24/7) of every corner of the attack surface with dynamic testing. Not just predefined targets - 100% payload-based testing fuelled by elite ethical hackers for a high signal-to-noise ratio - Distributed coverage across an unmatched array of relevant technologies - Actionable remediation tips for software development teams - Team functionality to easily share reports - Powerful integrations platform to prioritize and triage vulnerability findings onward to development teams -Advanced API functionality -Capabilities to set custom attack surface security policies **Average Rating:** 4.5/5.0 **Total Reviews:** 49 **How Do G2 Users Rate Detectify?** - **Has the product been a good partner in doing business?:** 9.7/10 (Category avg: 9.4/10) - **Performance and Reliability:** 9.5/10 (Category avg: 9.1/10) - **Vulnerability Scan:** 9.3/10 (Category avg: 9.1/10) - **Extensibility:** 7.2/10 (Category avg: 8.7/10) **Who Is the Company Behind Detectify?** - **Seller:** [Detectify](https://www.g2.com/sellers/detectify) - **Year Founded:** 2013 - **HQ Location:** Stockholm, Sweden - **Twitter:** @detectify (11,256 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/2850066/ (92 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 47% Small-Business, 35% Mid-Market #### What Are Detectify's Pros and Cons? **Pros:** - Automation (2 reviews) - Automation Testing (2 reviews) - Customizability (2 reviews) - Features (2 reviews) - Security (2 reviews) **Cons:** - Complexity (1 reviews) - Complex Queries (1 reviews) - Complex Setup (1 reviews) - Expensive (1 reviews) - Inaccuracy (1 reviews) ### What Do G2 Reviewers Say About Detectify? *AI-generated summary from verified user reviews* **Pros:** - Users value the **automation capabilities** of Detectify, enabling seamless integration and tailored security testing with ease. - Users value Detectify for its **easy automation of dynamic application security testing** , enhancing security without complex setups. - Users value the **customizability** of Detectify, enabling tailored security testing to fit diverse needs effortlessly. - Users appreciate the **dynamic application security testing** of Detectify, enabling efficient and comprehensive security assessments with ease. - Users appreciate the **easy integration and comprehensive security features** of Detectify, enhancing their testing processes effectively. **Cons:** - Users find the **complex setup** of Detectify challenging, impacting their initial experience with the product. - Users find the **complex queries** of Detectify challenging, particularly regarding GraphQL support and spidering clarity. - Users find the **complex setup** of Detectify challenging, which can hinder the onboarding process and user experience. - Users find Detectify **expensive** especially when testing multiple sites, impacting overall satisfaction with the service. - Users find **inaccuracy in results** due to unclear outcomes of spidering, leading to uncertainty in application assessments. #### What Are Recent G2 Reviews of Detectify? **"[Vulnerability scans made easy](https://www.g2.com/survey_responses/detectify-review-9059869)"** **Rating:** 5.0/5.0 stars *— Arkadiusz K.* [Read full review](https://www.g2.com/survey_responses/detectify-review-9059869) --- **"[Very happy from an admin/IT security manager view](https://www.g2.com/survey_responses/detectify-review-8197913)"** **Rating:** 5.0/5.0 stars *— Björn L.* [Read full review](https://www.g2.com/survey_responses/detectify-review-8197913) --- #### What Are G2 Users Discussing About Detectify? - [What is Detectify used for?](https://www.g2.com/discussions/what-is-detectify-used-for) - [Is Detectify a DAST tool?](https://www.g2.com/discussions/is-detectify-a-dast-tool) - [How does Detectify app work?](https://www.g2.com/discussions/how-does-detectify-app-work) - [What does Detectify scan for?](https://www.g2.com/discussions/what-does-detectify-scan-for) - [What is Detectify Deep scan?](https://www.g2.com/discussions/what-is-detectify-deep-scan) ### 3. [Hackrate Ethical Hacking Platform](https://www.g2.com/products/hackrate-ethical-hacking-platform/reviews) Hackrate Ethical Hacking Platform is a crowdsourced security testing solution designed to connect businesses with ethical hackers in order to identify and remediate security vulnerabilities. By leveraging the expertise of a diverse pool of ethical hackers, Hackrate enables organizations to enhance their cybersecurity posture efficiently and effectively. The platform is tailored for businesses of all sizes, from startups to large enterprises, seeking to bolster their security measures. With the increasing frequency of cyber threats, organizations are recognizing the importance of proactive security testing. Hackrate facilitates this by allowing companies to tap into a global network of skilled ethical hackers who can provide insights and solutions to potential vulnerabilities. This collaborative approach not only accelerates the testing process but also enriches the quality of security assessments through varied perspectives and methodologies. One of the key features of Hackrate is its user-friendly interface, which simplifies the onboarding process for both businesses and ethical hackers. Companies can initiate security testing within hours, streamlining the process of vulnerability identification. This rapid deployment is critical for organizations that need to address security concerns promptly, especially in a fast-paced digital landscape. Furthermore, Hackrate offers flexible pricing plans, making it accessible for businesses with varying budgets and security needs. Security and confidentiality are paramount in the realm of cybersecurity, and Hackrate prioritizes these aspects by implementing robust encryption and adhering to industry-standard security protocols. This commitment ensures that sensitive data remains protected throughout the testing process, fostering trust between businesses and ethical hackers. By utilizing Hackrate, organizations can confidently engage in security testing without compromising their data integrity. Overall, Hackrate Ethical Hacking Platform stands out as a comprehensive solution for businesses aiming to enhance their security frameworks. By combining the expertise of ethical hackers with an efficient, secure platform, Hackrate offers a practical approach to identifying and addressing security vulnerabilities, ultimately contributing to a safer digital environment. **Average Rating:** 4.9/5.0 **Total Reviews:** 35 **How Do G2 Users Rate Hackrate Ethical Hacking Platform?** - **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.4/10) - **Performance and Reliability:** 9.7/10 (Category avg: 9.1/10) - **Vulnerability Scan:** 9.9/10 (Category avg: 9.1/10) - **Extensibility:** 9.6/10 (Category avg: 8.7/10) **Who Is the Company Behind Hackrate Ethical Hacking Platform?** - **Seller:** [Hackrate](https://www.g2.com/sellers/hackrate) - **Year Founded:** 2020 - **HQ Location:** Budapest, HU - **Twitter:** @hackrate (363 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/hackrate/ (10 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Computer Software, Information Technology and Services - **Company Size:** 83% Small-Business, 11% Enterprise #### What Are Hackrate Ethical Hacking Platform's Pros and Cons? **Pros:** - Communication (2 reviews) - Customer Support (1 reviews) - Ease of Use (1 reviews) - Expertise (1 reviews) - Guidance (1 reviews) **Cons:** - Poor Customer Support (1 reviews) - Poor Interface Design (1 reviews) ### What Do G2 Reviewers Say About Hackrate Ethical Hacking Platform? *AI-generated summary from verified user reviews* **Pros:** - Users value the **supportive communication** from Hackrate's team, enhancing their positive experience on the platform. - Users value the **highly motivated and skilled customer support** team of Hackrate, facilitating successful project completion. - Users value the **ease of use** of Hackrate, appreciating its straightforward rules and responsive support team. - Users appreciate the **expertise of the Hackrate team** , reflecting real-world insights and a supportive environment. - Users praise the **highly motivated and skilled team** at Hackrate, contributing to successful cybersecurity project completions. **Cons:** - Users experience **poor customer support** during busy times, leading to delays in assistance and resolution of issues. - Users note that the **poor interface design** of Hackrate complicates navigation, making it less intuitive to use effectively. #### What Are Recent G2 Reviews of Hackrate Ethical Hacking Platform? **"[Private Programs and a Focused Contestant Pool](https://www.g2.com/survey_responses/hackrate-ethical-hacking-platform-review-12959394)"** **Rating:** 5.0/5.0 stars *— Konrád J.* [Read full review](https://www.g2.com/survey_responses/hackrate-ethical-hacking-platform-review-12959394) --- **"[Viewpoint from an ethical hacker](https://www.g2.com/survey_responses/hackrate-ethical-hacking-platform-review-11957612)"** **Rating:** 5.0/5.0 stars *— Verified User in Oil & Energy* [Read full review](https://www.g2.com/survey_responses/hackrate-ethical-hacking-platform-review-11957612) --- #### What Are G2 Users Discussing About Hackrate Ethical Hacking Platform? - [What is Hackrate Bug Bounty Platform used for?](https://www.g2.com/discussions/what-is-hackrate-bug-bounty-platform-used-for) - 1 comment ### 4. [APPCHECK](https://www.g2.com/products/appcheck/reviews) AppCheck is a Dynamic Application Security Testing (DAST) and network vulnerability testing solution, developed and supported by experienced penetration testers. We approach security testing as a hacker would, leveraging multiple proprietary crawling engines to analyse target behaviour across both modern and traditional technologies, including Single Page Applications (SPAs), APIs, and complex authentication flows such as SSO, 2FA, and TOTP. Organisations can conduct unlimited security assessments across Web Applications, SPAs, APIs, cloud services, networks, across internal or external assets. Supporting production and UAT testing, AppCheck also helps organisations ‘shift left’ by integrating with CI/CD pipelines and build servers, including ADO, GitHub, Jenkins, TeamCity, CircleCI, TravisCI, Bamboo, and GitLab CI/CD. Allowing automated security testing throughout development, identifying risks as soon as changes are introduced. AppCheck are proud to be part of the CVE Numbering Authority (CNA), contributing to global security research **Average Rating:** 4.6/5.0 **Total Reviews:** 67 **How Do G2 Users Rate APPCHECK?** - **Has the product been a good partner in doing business?:** 9.5/10 (Category avg: 9.4/10) - **Performance and Reliability:** 9.3/10 (Category avg: 9.1/10) - **Vulnerability Scan:** 9.5/10 (Category avg: 9.1/10) - **Extensibility:** 8.3/10 (Category avg: 8.7/10) **Who Is the Company Behind APPCHECK?** - **Seller:** [APPCHECK](https://www.g2.com/sellers/appcheck) - **Company Website:** https://www.appcheck-ng.com - **Year Founded:** 2014 - **HQ Location:** Leeds, GB - **Twitter:** @AppcheckNG (649 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/appcheck-ng-ltd/ (106 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Computer Software, Information Technology and Services - **Company Size:** 49% Mid-Market, 30% Small-Business #### What Are APPCHECK's Pros and Cons? **Pros:** - Vulnerability Detection (7 reviews) - Ease of Use (6 reviews) - Features (5 reviews) - Pentesting Efficiency (5 reviews) - Automated Scanning (4 reviews) **Cons:** - Poor Customer Support (2 reviews) - UX Improvement (2 reviews) - API Issues (1 reviews) - Difficult Customization (1 reviews) - Difficult Learning Curve (1 reviews) ### What Do G2 Reviewers Say About APPCHECK? *AI-generated summary from verified user reviews* **Pros:** - Users value the **thorough vulnerability detection** of AppCheck, significantly enhancing security and reducing manual testing costs. - Users highlight the **ease of use** of AppCheck, simplifying complex processes and enhancing overall functionality. - Users value the **excellent pricing and functionality** of AppCheck, appreciating personalized support and user-friendly reports. - Users value the **outstanding pentesting efficiency** of AppCheck, achieving more vulnerabilities detected with seamless automation. - Users value the **automated scanning** feature of AppCheck, simplifying vulnerability management with detailed, actionable reports. **Cons:** - Users find the **poor customer support** frustrating, needing service requests for simple changes to the scan list. - Users suggest that **UX improvements** could enhance AppCheck, especially in vulnerability scoring and report customization features. - Users find the **API issues** frustrating, relying on service requests for endpoint changes, although improvements are forthcoming. - Users find **difficult customization** options in AppCheck, limiting their ability to tailor reports to specific needs. - Users note a **difficult learning curve** with Appcheck, but overall they find the product highly effective. #### What Are Recent G2 Reviews of APPCHECK? **"[Effortless Vulnerability Management with APPCHECK](https://www.g2.com/survey_responses/appcheck-review-12463853)"** **Rating:** 5.0/5.0 stars *— Aaron H.* [Read full review](https://www.g2.com/survey_responses/appcheck-review-12463853) --- **"[Great onboarding experience and trial](https://www.g2.com/survey_responses/appcheck-review-11771398)"** **Rating:** 4.0/5.0 stars *— Tyler S.* [Read full review](https://www.g2.com/survey_responses/appcheck-review-11771398) --- ### 5. [StackHawk](https://www.g2.com/products/stackhawk/reviews) StackHawk is reimagining AppSec for AI-driven development, where applications are built faster than traditional AppSec tools can keep up. Our AppSec Intelligence Platform combines scalable runtime testing with complete attack surface discovery from source code. We integrate directly into development workflows and provide context-aware remediations to developers, enabling teams to find and fix exploitable vulnerabilities before they reach production. With real-time visibility and centralized program intelligence, AppSec teams can prioritize testing and fixing what matters. Companies like British Airways, ITV, and Norstella trust StackHawk to evaluate application risk, prove program value, and scale testing coverage to match development velocity. **Average Rating:** 4.6/5.0 **Total Reviews:** 67 **How Do G2 Users Rate StackHawk?** - **Has the product been a good partner in doing business?:** 9.1/10 (Category avg: 9.4/10) - **Performance and Reliability:** 9.2/10 (Category avg: 9.1/10) - **Vulnerability Scan:** 9.3/10 (Category avg: 9.1/10) - **Extensibility:** 9.2/10 (Category avg: 8.7/10) **Who Is the Company Behind StackHawk?** - **Seller:** [StackHawk](https://www.g2.com/sellers/stackhawk) - **Year Founded:** 2019 - **HQ Location:** Denver, CO - **Twitter:** @StackHawk (1,137 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/40780406/ (31 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 46% Small-Business, 35% Mid-Market #### What Are StackHawk's Pros and Cons? **Pros:** - Easy Integrations (10 reviews) - Customer Support (9 reviews) - Ease of Use (9 reviews) - Integrations (7 reviews) - Scanning Efficiency (5 reviews) **Cons:** - Setup Complexity (5 reviews) - Complex Setup (4 reviews) - High Learning Curve (3 reviews) - Lacking Features (3 reviews) - Limited Scope (3 reviews) ### What Do G2 Reviewers Say About StackHawk? *AI-generated summary from verified user reviews* **Pros:** - Users value the **easy integrations** for various tools, enhancing automation and streamlining their workflows effectively. - Users commend the **great customer support** from StackHawk, with quick responses and helpful resources available. - Users find StackHawk's **ease of use** refreshing, especially after the initial setup and integration with CI tools. - Users praise the **seamless integrations** with CI tools and other platforms, enhancing their workflow efficiency and testing capability. - Users highlight the **impressive scanning efficiency** of StackHawk, enabling quick identification of vulnerabilities and seamless integration. **Cons:** - Users find the **setup complexity** of StackHawk challenging due to confusing YAML configurations and onboarding processes. - Users find the **complex setup** of StackHawk frustrating, particularly with YAML files and onboarding procedures. - Users find StackHawk has a **high learning curve** due to its complex scripting and limited training resources. - Users note the **lack of features** in StackHawk, citing limitations in API endpoint handling and vulnerability management. - Users find the **limited scope** of StackHawk restricts usability and customization, impacting their vulnerability management efforts. #### What Are Recent G2 Reviews of StackHawk? **"[A Game-Changer for DevSecOps](https://www.g2.com/survey_responses/stackhawk-review-8847655)"** **Rating:** 5.0/5.0 stars *— Todd L.* [Read full review](https://www.g2.com/survey_responses/stackhawk-review-8847655) --- **"[StackHawk is a great DAST security tool](https://www.g2.com/survey_responses/stackhawk-review-10761348)"** **Rating:** 5.0/5.0 stars *— David M.* [Read full review](https://www.g2.com/survey_responses/stackhawk-review-10761348) --- #### What Are G2 Users Discussing About StackHawk? - [What is StackHawk used for?](https://www.g2.com/discussions/what-is-stackhawk-used-for) ## What Is Penetration Testing Tools? [DevSecOps Software](https://www.g2.com/categories/devsecops) ## What Software Categories Are Similar to Penetration Testing Tools? - [Vulnerability Scanner Software](https://www.g2.com/categories/vulnerability-scanner) - [Dynamic Application Security Testing (DAST) Software](https://www.g2.com/categories/dynamic-application-security-testing-dast) - [Risk-Based Vulnerability Management Software](https://www.g2.com/categories/risk-based-vulnerability-management)