Best Penetration Testing Tools - Page 4

How Many Penetration Testing Tools Products Does G2 Track?

Total Products under this Category: 200

Category Stats (Nov 2026)

  • Average Rating: 4.64/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: CybaOps (+4.75%) - Among all products in this category, CybaOps recorded the largest rating increase compared to last month

Last updated: November 01, 2026

How Does G2 Rank Penetration Testing Tools Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 3,900+ Authentic Reviews
  • 200+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Penetration Testing Tools

G2 Grid® for Penetration Testing Tools plotting products by satisfaction and market presence

Highlighted products: Cobalt, vPenTest, Astra Pentest, NodeZero from Horizon3, Oneleet, Pentera, H1 Platform, and Verizon Penetration Testing.

Underlying data: [Grid® JSON](https://www.g2.com/categories/penetration-testing-tools/grids.json?focus%5B%5D=cobalt-io-cobalt&focus%5B%5D=vpentest&focus%5B%5D=astra-pentest&focus%5B%5D=nodezero-from-horizon3&focus%5B%5D=oneleet&focus%5B%5D=pentera&focus%5B%5D=h1-platform&focus%5B%5D=verizon-penetration-testing)

AppSec Labs

AppSec Labs is an application security company that does one thing: penetration testing of software-based systems — web applications, REST and GraphQL APIs, mobile apps, and the AI features increasingly built into them. We are software engineers who specialise in attacking software, which is why we find the flaws that require understanding a system rather than scanning it: broken authorization, multi-tenant isolation failures, business logic and workflow abuse. Testing is human-led, accelerated by our own platform, CybeRapid. Reports are written for the engineers who have to fix the problem — reproduction steps, real impact and concrete remediation — and every reported finding is retested after the fix, as part of the engagement.

Average Rating: 4.4/5.0

Total Reviews: 46

How Do G2 Users Rate AppSec Labs?

  • Has the product been a good partner in doing business?: 8.3/10 (Category avg: 9.4/10)

Who Is the Company Behind AppSec Labs?

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 48% Small, 33% Medium

What Are Recent G2 Reviews of AppSec Labs?

Veracode Application Security Platform

Veracode helps companies that innovate through software deliver secure code on time. Unlike on-premise solutions that are hard to scale and focused on finding rather than fixing, Veracode comprises a unique combination of SaaS technology and on-demand expertise that enables DevSecOps through integration with your pipeline,empower developers to fix security defects, and scales your program through best practices to achieve your desired outcomes. Veracode covers your all your AppSec needs in one solution through a combination of five analysis types available for 24 programming languages, 77 frameworks, and application types as varied as microservices, mainframe and mobile apps.

Average Rating: 3.8/5.0

Total Reviews: 25

How Do G2 Users Rate Veracode Application Security Platform?

  • Has the product been a good partner in doing business?: 7.9/10 (Category avg: 9.4/10)
  • Performance and Reliability: 8.8/10 (Category avg: 9.2/10)
  • Vulnerability Scan: 8.8/10 (Category avg: 9.2/10)
  • Extensibility: 7.9/10 (Category avg: 8.8/10)

Who Is the Company Behind Veracode Application Security Platform?

  • Seller: VERACODE
  • Year Founded: 2006
  • HQ Location: Burlington, MA
  • LinkedIn® Page: www.linkedin.com
    500 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services
  • Company Size: 69% Large, 31% Medium

What Do G2 Reviewers Say About Veracode Application Security Platform?

AI-generated summary from verified user reviews

Pros
  • Users value the accuracy of findings from Veracode, providing clear reports with corrections and suggestions for improvement.
  • Users value the single entry point for application security, enabling detailed insights and effective security scanning.
  • Users value the scanning efficiency of Veracode, enabling precise reports and seamless integration into CI/CD pipelines.
  • Users value the effective security vulnerability identification provided by Veracode, enhancing their overall application safety.
  • Users value the effective vulnerability detection of Veracode, enhancing security across applications through comprehensive analysis.
Cons
  • Users face a lack of information due to mismatches in documentation and delayed notifications during uploads.
  • Users report poor customer support with pushy account executives and difficulties in resolving issues efficiently.
  • Users find the overly complex license model challenging, contributing to frustration and misalignment with expectations.
  • Users find the confusing interface of Veracode to be challenging, especially during unsuccessful uploads without immediate notifications.
  • Users are concerned about the cost issues related to complex licensing and justifying customer success investments.

What Are Recent G2 Reviews of Veracode Application Security Platform?

What Are G2 Users Discussing About Veracode Application Security Platform?

sql map

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers.

Average Rating: 4.0/5.0

Total Reviews: 12

How Do G2 Users Rate sql map?

  • Has the product been a good partner in doing business?: 5.0/10 (Category avg: 9.4/10)

Who Is the Company Behind sql map?

Who Uses This Product?

  • Top Industries: Information Technology and Services
  • Company Size: 71% Medium, 29% Large

What Are Recent G2 Reviews of sql map?

What Are G2 Users Discussing About sql map?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works

NowSecure

NowSecure Inc., based in Oak Park, Illinois, was formed in 2009 with a mission to advance mobile security worldwide. We help secure mobile devices, enterprises and mobile apps.

Average Rating: 4.6/5.0

Total Reviews: 27

How Do G2 Users Rate NowSecure?

  • Has the product been a good partner in doing business?: 9.3/10 (Category avg: 9.4/10)
  • Vulnerability Scan: 10.0/10 (Category avg: 9.2/10)
  • Extensibility: 10.0/10 (Category avg: 8.8/10)

Who Is the Company Behind NowSecure?

  • Seller: NowSecure
  • Year Founded: 2009
  • HQ Location: Chicago, Illinois
  • LinkedIn® Page: www.linkedin.com
    101 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 41% Medium, 37% Large

What Are Recent G2 Reviews of NowSecure?

What Are G2 Users Discussing About NowSecure?

ZeroThreat

ZeroThreat Inc. is an AI-driven cybersecurity innovator dedicated to transforming how modern enterprises protect their web applications and APIs through its advanced platform. We empower organizations, from fast-growing startups to global enterprises, to stay ahead of evolving threats by delivering continuous, attacker-style penetration testing at the speed of modern development. Our mission is to eliminate the noise and complexity of traditional application security. By pioneering an Agentic AI engine and automated penetration testing platform, ZeroThreat.ai enables security teams to automate complex manual processes, reducing manual pentesting effort by 90% while achieving a 99.9% accuracy rate. It doesn't just scan for vulnerabilities. It validates real-world attack paths and provides audit-ready evidence, ensuring that organizations in highly regulated sectors such as Fintech, Healthcare, and Government can scale securely and maintain compliance. ZeroThreat.ai bridges the gap between developers and security teams by providing proof-based findings and actionable remediation guidance. We are committed to restoring developer trust through non-destructive, intelligent validation that focuses exclusively on exploitable risks, allowing businesses to ship software up to 10x faster without compromising security.

Average Rating: 4.8/5.0

Total Reviews: 10

How Do G2 Users Rate ZeroThreat?

  • Has the product been a good partner in doing business?: 9.4/10 (Category avg: 9.4/10)
  • Performance and Reliability: 9.2/10 (Category avg: 9.2/10)
  • Vulnerability Scan: 9.3/10 (Category avg: 9.2/10)
  • Extensibility: 9.0/10 (Category avg: 8.8/10)

Who Is the Company Behind ZeroThreat?

Who Uses This Product?

  • Company Size: 50% Large, 30% Medium

What Do G2 Reviewers Say About ZeroThreat?

AI-generated summary from verified user reviews

Pros
  • Users value the ease of use of ZeroThreat, enjoying smooth integration and a user-friendly interface for security management.
  • Users value the real-time vulnerability detection of ZeroThreat, enhancing security without disrupting workflow and reducing false positives.
  • Users commend the accuracy of results from ZeroThreat, significantly reducing false positives and enhancing security efficiency.
  • Users appreciate the setup ease of ZeroThreat, enabling quick integration into existing workflows without complications.
  • Users appreciate the easy setup of ZeroThreat, allowing quick integration and immediate security scanning in their workflow.
Cons
  • Users find the inefficient filtering in ZeroThreat's reporting section makes locating specific results unnecessarily time-consuming.
  • Users experience integration issues with ZeroThreat, finding it challenging to connect with DevOps tools and proprietary software.
  • Users feel that the limited integrations with other tools hinder a more seamless experience with ZeroThreat.
  • Users report slow performance in ZeroThreat, with lagging features and longer loading times affecting productivity.
  • Users note that the UX improvement in ZeroThreat is needed for better navigation, filtering, and faster loading times.

What Are Recent G2 Reviews of ZeroThreat?

Reflectiz

Reflectiz is the AI-powered web exposure company trusted by hundreds of global organizations, including DAZN, Cox Communications, Village Roadshow, and Leeds United, to continuously monitor everything that executes on their live websites. Rather than scanning code or configuration, Reflectiz watches real browser execution, the actual scripts, pixels, and third and fourth-party tools running in front of your users, and applies AI to flag malicious behavior, unauthorized data flows, and compliance gaps the moment they appear. Reflectiz is built around four hubs that all run on this same engine. Security Hub continuously monitors every script and library executing on your site, catching Magecart-style skimming, supply chain attacks, and AI-generated threats that firewalls and perimeter tools were never built to see. Privacy Hub verifies that user data is only collected and shared the way your consent banner promises, supporting GDPR, CCPA, HIPAA, and PIPEDA. Offensive Hub runs continuous, agentic penetration testing, using AI agents to map applications and validate exploitable risks at up to 10x the capacity of manual pentesting. PCI Module automates PCI DSS 4.0.1 Requirements 6.4.3 and 11.6.1 with audit-ready evidence. Together, the four hubs give Security, Privacy, Compliance, and Digital teams one 360-degree view of web risk instead of four disconnected tools and reports. Reflectiz operates entirely remotely through its proprietary sandbox browser, with zero code changes, zero agents, and no access to sensitive data, typically going live within one business day. Its Exposure Rating draws on an intelligence database built from monitoring millions of websites, and the platform has been recognized with a 2026 Fortress Cyber Security Award, a 2025 Top InfoSec Innovator award, and G2 High Performer status. Customers frequently cite fast, hands-off onboarding and responsive support alongside a growing library of published case studies across e-commerce, financial services, and entertainment.

Average Rating: 4.7/5.0

Total Reviews: 32

How Do G2 Users Rate Reflectiz?

  • Has the product been a good partner in doing business?: 9.5/10 (Category avg: 9.4/10)

Who Is the Company Behind Reflectiz?

  • Seller: Reflectiz
  • Company Website:
  • Year Founded: 2016
  • HQ Location: Ramat Gan, IL
  • LinkedIn® Page: www.linkedin.com
    62 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 50% Large, 34% Medium

What Do G2 Reviewers Say About Reflectiz?

AI-generated summary from verified user reviews

Pros
  • Users value the instant visibility and powerful security tools provided by Reflectiz, enhancing overall compliance and risk management.
  • Users value the ongoing alerts from Reflectiz, enhancing their compliance and security management effortlessly.
  • Users commend Reflectiz for its ease of use, with simple deployment and efficient risk management tools.
  • Users value the constant and intuitive monitoring provided by Reflectiz, enhancing security and risk management effortlessly.
  • Users value the real-time monitoring of Reflectiz for its intuitive and constant oversight of web threats.
Cons
  • Users find Reflectiz expensive, particularly due to the need for training and higher costs than competitors.
  • Users find the complexity of the software necessitates training, limiting affordability for smaller entities.
  • Users find the insufficient training a barrier, increasing costs and limiting affordability for smaller organizations.
  • Users find a lack of clarity in script approvals, leading to confusion over session ID reporting issues.
  • Users find the learning difficulty of Reflectiz adds extra costs, limiting accessibility mainly to larger organizations.

What Are Recent G2 Reviews of Reflectiz?

What Are G2 Users Discussing About Reflectiz?

AppSecure Security

AppSecure Security is a CREST-accredited offensive security company specializing in Red Teaming, Penetration Testing (Pentesting), and Vulnerability Assessment and Penetration Testing (VAPT). We deliver hacker-focused security assessments to help businesses understand their security posture and protect against real-world cyber threats. Our expert team employs cutting-edge, real-world hacking techniques to evaluate your organization’s security posture, identify critical security vulnerabilities, and work with your team to remediate them effectively. Backed by elite security researchers with proven expertise in leading bug bounty programs like PayPal, Reddit, LinkedIn, Instacart, and more, AppSecure Security is your trusted partner in safeguarding your business from evolving cyber threats.

Average Rating: 4.9/5.0

Total Reviews: 7

How Do G2 Users Rate AppSecure Security?

  • Has the product been a good partner in doing business?: 9.2/10 (Category avg: 9.4/10)
  • Performance and Reliability: 9.3/10 (Category avg: 9.2/10)
  • Vulnerability Scan: 9.3/10 (Category avg: 9.2/10)
  • Extensibility: 8.7/10 (Category avg: 8.8/10)

Who Is the Company Behind AppSecure Security?

  • Seller: AppSecure
  • Year Founded: 2015
  • HQ Location: Bengaluru, India
  • LinkedIn® Page: in.linkedin.com
    14 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 63% Medium, 38% Small

What Do G2 Reviewers Say About AppSecure Security?

AI-generated summary from verified user reviews

Pros
  • Users value the clear interface of AppSecure Security, making management and tracking of security issues effortless.
  • Users value AppSecure Security's comprehensive solutions, appreciating its end-to-end protection and customizable features for enhanced security.
  • Users value the customizable security options of AppSecure Security, allowing tailored solutions for diverse security needs.
  • Users appreciate the real-time monitoring of AppSecure Security, enhancing their ability to swiftly address potential threats.
  • Users appreciate the detailed reporting in AppSecure Security, which provides actionable insights for better security management.
Cons
  • Users find the initial setup complex, posing challenges for smaller organizations lacking cybersecurity expertise.
  • Users find the initial setup complex, making it challenging for smaller organizations without dedicated cybersecurity expertise.
  • Users find the high learning curve of AppSecure Security challenging, particularly for teams lacking cybersecurity expertise.
  • Users find the initial setup complex, particularly for smaller teams lacking dedicated cybersecurity expertise.

What Are Recent G2 Reviews of AppSecure Security?

ImmuniWeb AI Platform

The ImmuniWeb AI Platform helps over 1,000 enterprise customers from more than 50 countries to test, secure and protect their web and mobile applications, APIs and microservices, cloud and networks, to prevent data breaches and reduce third-party risk, and to comply with regulatory requirements. ImmuniWeb’s products available on the Platform include Continuous Threat Exposure Management (CTEM), External Attack Surface Management (EASM), Dark Web Monitoring and phishing websites takedown, as well as vulnerability scanning and penetration testing for web and mobile apps, cloud and network infrastructure, and LLM models. Headquartered in Geneva, Switzerland, ImmuniWeb has offices in Washington, London and Dubai to provide an uninterrupted service to all global customers and partners.

Average Rating: 4.7/5.0

Total Reviews: 12

How Do G2 Users Rate ImmuniWeb AI Platform?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.4/10)
  • Performance and Reliability: 9.4/10 (Category avg: 9.2/10)
  • Vulnerability Scan: 10.0/10 (Category avg: 9.2/10)
  • Extensibility: 9.4/10 (Category avg: 8.8/10)

Who Is the Company Behind ImmuniWeb AI Platform?

Who Uses This Product?

  • Company Size: 92% Medium, 8% Small

What Do G2 Reviewers Say About ImmuniWeb AI Platform?

AI-generated summary from verified user reviews

Pros
  • Users value the continuous monitoring of the attack surface that prevents potential financial and reputational losses.
  • Users value the continuous monitoring efficiency of ImmuniWeb AI Platform, enhancing security and reducing operational overhead.
  • Users value the alert notifications from ImmuniWeb AI, keeping them informed about critical issues to prevent potential losses.
  • Users value the detailed remediation steps and responsive support offered by ImmuniWeb AI Platform for efficient testing.
  • Users commend the effective communication from ImmuniWeb AI Platform's account managers, enhancing client satisfaction and support.
Cons
  • Users find the varying complexity of targets makes it hard to estimate scanning times accurately.
  • Users find the lack of integration with Slack or PagerDuty challenging, especially for on-call engineers outside regular hours.
  • Users find the lack of integration with Slack or PagerDuty challenging, especially for on-call engineers after hours.
  • Users find the limited Excel export feature restrictive compared to the comprehensive JSON format available.
  • Users report a limited flexibility in the past with the algorithm for cost calculation, though improvements have been noted.

What Are Recent G2 Reviews of ImmuniWeb AI Platform?

What Are G2 Users Discussing About ImmuniWeb AI Platform?

PentestPad

PentestPad is a penetration testing reporting platform used by offensive security consultancies, managed security service providers, and in-house red teams to manage engagements end-to-end and deliver client-ready reports. Testers create projects, capture findings with evidence and CVSS scoring, and collaborate in a shared editor where an AI assistant drafts finding descriptions, impact statements, and remediation guidance based on the vulnerability context already entered. Existing DOCX report templates can be imported and rebuilt inside PentestPad at no additional cost, so consultancies retain their established report style rather than adopt a vendor template. Scanner output from Nessus, Burp Suite, Nuclei, and custom feeds can be imported directly into a project, and finished reports export to DOCX, PDF, and XLSX. It consolidates project planning, collaborative finding management, AI-assisted report writing, and client delivery into a single web application. PentestPad is available as a managed EU-hosted cloud service and as a fully self-hosted installation for air-gapped and regulated environments. The AI assistant can be configured to use a self-hosted language model so client data never leaves the customer's infrastructure. PentestPad is ISO 27001 certified, GDPR compliant, EU-hosted by default, and priced publicly per seat.

Average Rating: 5.0/5.0

Total Reviews: 7

How Do G2 Users Rate PentestPad?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.4/10)
  • Performance and Reliability: 10.0/10 (Category avg: 9.2/10)
  • Vulnerability Scan: 10.0/10 (Category avg: 9.2/10)
  • Extensibility: 10.0/10 (Category avg: 8.8/10)

Who Is the Company Behind PentestPad?

Who Uses This Product?

  • Company Size: 86% Small, 14% Medium

What Are Recent G2 Reviews of PentestPad?

PlexTrac

PlexTrac is the leading AI-powered platform for pentest reporting and threat exposure management, trusted by Fortune 500 companies and top security providers. Built to help cybersecurity teams continuously manage and reduce threat exposure, PlexTrac centralizes security data, streamlines reporting, prioritizes risk, and automates remediation workflows—empowering teams to drive measurable risk reduction. The platform is ideal for enterprises & service providers looking to deliver a Continuous Threat Exposure Management (CTEM) framework across their business. With our suite of solutions, you can consolidate security data from tools and manual testing, automatically prioritize risks based on business impact, and automate remediation and retesting workflows for ongoing, more effective threat management.

Average Rating: 4.8/5.0

Total Reviews: 15

How Do G2 Users Rate PlexTrac?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.4/10)
  • Performance and Reliability: 10.0/10 (Category avg: 9.2/10)
  • Vulnerability Scan: 0.0/10 (Category avg: 9.2/10)
  • Extensibility: 10.0/10 (Category avg: 8.8/10)

Who Is the Company Behind PlexTrac?

  • Seller: PlexTrac
  • Company Website:
  • Year Founded: 2016
  • HQ Location: Boise, Idaho
  • LinkedIn® Page: www.linkedin.com
    80 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Consulting
  • Company Size: 40% Small, 40% Large

What Do G2 Reviewers Say About PlexTrac?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the intuitive design and extensive features of PlexTrac, enhancing reporting efficiency and user experience.
  • Users commend the amazing customer support of PlexTrac, noting quick and effective assistance for any issues.
  • Users find PlexTrac to have a clean and intuitive UI, making navigation and reporting significantly easier.
  • Users praise PlexTrac for its reporting efficiency, transforming tedious processes into streamlined, organized workflows for assessments.
  • Users value the seamless integrations with tools like Jira and Tenable that enhance efficiency and reduce manual effort.
Cons
  • Users note some missing features in PlexTrac's on-premise version, affecting functionality compared to SaaS options.
  • Users note some complexity in report formatting, requiring extra effort to achieve the desired presentation.
  • Users find the complex setup of PlexTrac challenging, especially for those new to security tools and automation platforms.
  • Users face a difficult learning curve with PlexTrac, though support is readily available for assistance.
  • Users desire more streamlined reporting options in PlexTrac for improved Threat Hunting and Incident Response plans.

What Are Recent G2 Reviews of PlexTrac?

AppSentinels

AppSentinels protects your APIs by securing the business logic that drives your operations. Continuous discovery, automated API pen testing, and real-time defense stop hidden threats before they disrupt your business, ensuring seamless, risk-free innovation without slowing development.

Average Rating: 4.9/5.0

Total Reviews: 10

How Do G2 Users Rate AppSentinels?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.4/10)
  • Vulnerability Scan: 10.0/10 (Category avg: 9.2/10)

Who Is the Company Behind AppSentinels?

Who Uses This Product?

  • Company Size: 60% Medium, 20% Large

What Do G2 Reviewers Say About AppSentinels?

AI-generated summary from verified user reviews

Pros
  • Users value the automated discovery of shadow and undocumented APIs, enhancing their security testing processes significantly.
  • Users praise the responsive and knowledgeable support team of AppSentinels, enhancing their overall experience significantly.
  • Users value the automated discovery of vulnerabilities in AppSentinels, enhancing their security efforts effectively.

What Are Recent G2 Reviews of AppSentinels?

Cytix

Cytix is the security decision layer for a world where software development never stops. It reads the context behind every ticket, pull request and release, and helps security, engineering and risk teams decide which software changes carry real risk, what response is proportionate, and what evidence to keep. Cytix already powers KPMG and NCC Group's continuous testing programme, turning software change into security decisions the business can stand behind.

Average Rating: 4.7/5.0

Total Reviews: 11

How Do G2 Users Rate Cytix?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.4/10)
  • Performance and Reliability: 9.7/10 (Category avg: 9.2/10)
  • Vulnerability Scan: 9.4/10 (Category avg: 9.2/10)
  • Extensibility: 9.7/10 (Category avg: 8.8/10)

Who Is the Company Behind Cytix?

  • Seller: Cytix
  • Year Founded: 2022
  • HQ Location: Manchester
  • LinkedIn® Page: www.linkedin.com
    25 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 55% Small, 36% Medium

What Do G2 Reviewers Say About Cytix?

AI-generated summary from verified user reviews

Pros
  • Users value the automation features of Cytix, enabling efficient triaging and seamless integration into development workflows.
  • Users value the automated testing feature of Cytix, appreciating its real-time scanning and AI-driven predictions.
  • Users value the clear interface of Cytix for delivering actionable insights seamlessly integrated into their workflows.
  • Users value the clear and actionable insights from Cytix, enhancing efficiency in identifying and addressing issues.
  • Users rave about the fantastic customer support from Cytix, highlighting their expertise and assistance during and after implementation.
Cons
  • Users find the confusing interface somewhat critical, but appreciate that the product ultimately works well.
  • Users find the difficult learning curve of Cytix challenging due to unfamiliarity with the software.
  • Users find Cytix to be expensive, especially when compared to traditional penetration testing and open-source tools.
  • Users often face false positives with Cytix, causing extra work without real security threats identified.
  • Users find limited customization of Cytix's workflows and templates affects their ability to meet specific needs.

What Are Recent G2 Reviews of Cytix?

Infiltra.ai - Autonomous Web Application Penetration Testing Platform

Infiltra.ai is redefining penetration testing for modern application security. Traditional pentesting is slow, manual, and point-in-time. Modern applications ship weekly, sometimes daily. That gap creates risk. Infiltra.ai closes it. Our AI-powered platform continuously tests web applications and APIs using autonomous agents that behave like real attackers, not just vulnerability scanners. We don’t just identify vulnerabilities. We exploit them, validate real impact, and provide clear remediation paths. What makes Infiltra different • Autonomous attack simulation Agents chain exploits, escalate privileges, and validate real-world risk • Continuous security testing Run on-demand, scheduled, or embedded directly into CI/CD pipelines • Exploit validation (not noise) Every finding is backed by evidence. No false positives, no guesswork • Full-stack coverage Deep testing across web apps, APIs, authentication flows, and business logic • Instant retesting Validate fixes immediately with delta scans. No more waiting weeks for retesting services or just trusting that the team has done it. Built with modern teams in mind, Infiltra empowers: • Security teams to reduce risk and prioritise what matters • Developers to test early and often without bottlenecks • Organisations to move from annual audits → continuous assurance Security shouldn’t slow you down. It should keep up. Test continuously. Validate real risk. Ship with confidence.

Average Rating: 4.9/5.0

Total Reviews: 6

How Do G2 Users Rate Infiltra.ai - Autonomous Web Application Penetration Testing Platform?

  • Has the product been a good partner in doing business?: 9.6/10 (Category avg: 9.4/10)
  • Performance and Reliability: 10.0/10 (Category avg: 9.2/10)
  • Vulnerability Scan: 10.0/10 (Category avg: 9.2/10)
  • Extensibility: 10.0/10 (Category avg: 8.8/10)

Who Is the Company Behind Infiltra.ai - Autonomous Web Application Penetration Testing Platform?

  • Seller: Infiltra
  • Company Website:
  • Year Founded: 2025
  • HQ Location: San Francisco, US
  • LinkedIn® Page: www.linkedin.com
    5 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 67% Small, 33% Medium

What Are Recent G2 Reviews of Infiltra.ai - Autonomous Web Application Penetration Testing Platform?

Penti

Penti addresses the complex and costly problem of cybersecurity for SMEs with its AI-enhanced penetration testing platform. By blending cutting-edge AI with expert human oversight, Securily provides thorough, efficient, and affordable security assessments. This unique approach not only detects vulnerabilities but also guides remediation, helping businesses strengthen their defenses and comply with industry standards effortlessly.

Average Rating: 5.0/5.0

Total Reviews: 6

How Do G2 Users Rate Penti?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.4/10)
  • Performance and Reliability: 10.0/10 (Category avg: 9.2/10)
  • Vulnerability Scan: 9.3/10 (Category avg: 9.2/10)
  • Extensibility: 8.0/10 (Category avg: 8.8/10)

Who Is the Company Behind Penti?

  • Seller: Penti
  • Year Founded: 2025
  • HQ Location: Boca Raton, US
  • LinkedIn® Page: www.linkedin.com
    16 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Small

What Are Recent G2 Reviews of Penti?

Escape

Escape automates the full offensive security lifecycle, multiplying the impact of every security engineer tenfold. Our key products: 1. AI Pentesting: Replace manual pentest and bug bounty programs with a solution that scales. 2. Business-logic-aware DAST: Replace legacy DAST with business-logic-aware testing that improves over time and helps your team remediate real, exploitable vulnerabilities. 3. Attack Surface Management: Discover and validate exposure of modern applications, APIs, and infrastructure from code to cloud. Escape is a customer-centric company, supporting more than 2000+ security teams worldwide, and we have the privilege of working with exceptional companies like Schibsted (Media), HealthEquity (Healthcare), Applied (InsurTech), Visma, Miro (Tech), DoubleVerify (AdTech), Thinkific (EdTech), and many others.

Average Rating: 4.9/5.0

Total Reviews: 10

How Do G2 Users Rate Escape?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.4/10)

Who Is the Company Behind Escape?

  • Seller: Escape
  • Company Website:
  • Year Founded: 2020
  • HQ Location: Paris, France
  • LinkedIn® Page: www.linkedin.com
    76 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 50% Small, 40% Medium

What Do G2 Reviewers Say About Escape?

AI-generated summary from verified user reviews

Pros
  • Users highlight the ease of use of Escape, praising its simple setup and seamless CI/CD integration.
  • Users love the easy integrations with Escape, facilitating smooth workflows and secure GraphQL endpoint checks.
  • Users appreciate the effective scanning technology of Escape, enhancing API security management and vulnerability detection.
  • Users value the strong API security features of Escape, ensuring effective management and detection of vulnerabilities.
  • Users commend Escape for its effective API security management, adeptly identifying various vulnerabilities, including overlooked business logic flaws.
Cons
  • Users find the complex setup of Escape can be a challenge, requiring adjustment to keep up with updates.
  • Users find difficult upgrades sometimes challenging, but appreciate the continuous improvements and security enhancements of the platform.
  • Users note the limited features currently offered, though improvements are promised based on active feedback and updates.
  • Users note missing features in Escape, yet appreciate the roadmap for updates and responsiveness to feedback.
  • Users find update issues occasionally challenging, though the overall tool benefits outweigh these minor inconveniences.

What Are Recent G2 Reviews of Escape?

Lauren Worth
LW
Researched and written by Lauren Worth
Updated March 5, 2025