Total Products under this Category: 136
Last updated: August 05, 2026
Why You Can Trust G2's Software Rankings:
G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.
Highlighted products: Cobalt, vPenTest, Astra Pentest, Oneleet, NodeZero from Horizon3.ai, Bugcrowd, Verizon Penetration Testing, and H1 Platform.
Underlying data: [Grid® JSON](https://www.g2.com/categories/penetration-testing-tools/grids.json?focus%5B%5D=cobalt-io-cobalt&focus%5B%5D=vpentest&focus%5B%5D=astra-pentest&focus%5B%5D=oneleet&focus%5B%5D=nodezero-from-horizon3-ai&focus%5B%5D=bugcrowd&focus%5B%5D=verizon-penetration-testing&focus%5B%5D=h1-platform)
Sponsored
Cyver Core is a pentest collaboration and management platform to digitize, automate, and optimize manual work for pentest firms, while enabling Pentest-as-a-Service delivery. Cyver Core offers pentest report automation, branded client portals, pentest management, team management, and more.
Penzzer is an integrated Pen Testing & Fuzzing Purpose-Built for Automotive, IoT and medical device security testing
Average Rating: 5.0/5.0
Total Reviews: 3
Rating: 5.0/5.0 stars
— Stefani U.
"A Five-Star Experience from Start to Finish"
Rating: 5.0/5.0 stars
— Emilija M.
Capture The Bug is a CREST-aligned Penetration Testing as a Service (PTaaS) platform that helps startups, scale-ups, and enterprises continuously manage penetration testing through a single platform. Organizations use Capture The Bug to scope tests, collaborate with security experts in real time, track remediation, and meet compliance requirements such as ISO 27001, SOC 2, PCI DSS, and customer security assessments. Trusted by listed companies and fast-growing technology businesses across New Zealand, Australia, and beyond.
Average Rating: 5.0/5.0
Total Reviews: 2
"High-Quality Output and a Business Model That Fits Us Perfectly"
Rating: 5.0/5.0 stars
— Jacques L.
"Clear, Detailed Pen Test Reports with Severity-Graded Risks"
Rating: 5.0/5.0 stars
— Neil E.
Cyber Chief is a vulnerability scanner & issue management tool that helps you ship software with zero known security vulnerabilities. It gives your software team the power to find and fix thousands of vulnerabilities in your web applications and cloud infrastructure. With its one-click vulnerability scanning and smart vulnerability management features, Cyber Chief will help your software team secure their applications abs infrastructure, even if there is zero application security qualifications or experience on the team. Cyber Chief is cloud-based and has military-grade security controls so that your security secrets are kept safe.
Average Rating: 4.5/5.0
Total Reviews: 7
AI-generated summary from verified user reviews
"Trusted partner in your journey to a vulnerability-free software"
Rating: 4.5/5.0 stars
— Todor P.
"A security tool that has it all : WebApp , API & CSPM"
Rating: 4.5/5.0 stars
— Dipika C.
PurpleRidge Security™ is an Agentic AI-based penetration testing service, developed by Ridge Security as a fully self-service offering dedicated to SMBs and MSSPs. It is the first commercial solution to seamlessly integrate LLM reasoning capabilities with domain-specific cybersecurity expertise — delivering high-confidence testing results and actionable remediation guidance. WHAT PURPLERIDGE TEST 1) Website Penetration Testing Identifies SQL Injection, SSRF, XSS, Clickjacking and more — aligned with OWASP Top 10 standards. 2) AWS Account Audit Detects misconfigurations, exposed attack surfaces, and monitoring gaps — including S3 bucket exposure. 3) Compliance Reporting Built-in alignment to OWASP Top 10 and SOC 2 — so your audit readiness improves alongside your security posture. PurpleRidge is a fully self-service solution for organizations that need automated security validation — no dedicated IT or security staff required. Think of it as your dedicated security team: tirelessly validating and defending you from AI-based attacks and compliance mandates so you can focus on growth.
Average Rating: 4.8/5.0
Total Reviews: 2
"Easy Self-Service Pentest with Clear, Noise-Free Reports"
Rating: 4.5/5.0 stars
— Verified User in Information Technology and Services
"Results-Driven Security Testing Without the Usual Complexity"
Rating: 5.0/5.0 stars
— Verified User in Computer & Network Security
MazeBolt RADAR is a patented DDoS Vulnerability Management solution. Using thousands of non-disruptive DDoS attack simulations and without affecting online services, RADAR identifies and enables the remediation of vulnerabilities in deployed DDoS protection solutions.
Average Rating: 4.3/5.0
Total Reviews: 2
"Groundbreaking tech that offers Proactive Mitigation Intelligence to eliminate DDoS vulns."
Rating: 5.0/5.0 stars
— Jim K.
Scantrics offer 11 security testing tools that scan and identifies vulnerabilities in websites and web applications.
Average Rating: 5.0/5.0
Total Reviews: 2
"optimized website to scan sites for malicious activity."
Rating: 5.0/5.0 stars
— Verified User in Mechanical or Industrial Engineering
"The best tool to sleep well at night knowing your web assets are well protected"
Rating: 5.0/5.0 stars
— Bruno V.
Siemba is an AI-driven Continuous Threat Exposure Management (CTEM) platform that helps enterprises, government agencies, and growing organizations discover, prioritize, and fix critical vulnerabilities across their entire attack surface. Security teams use Siemba to build and mature CTEM programs without requiring deep hacking expertise or constant human intervention. The platform brings together four integrated capabilities on a single unified interface: Penetration Testing as a Service (PTaaS) for expert-led manual pen testing on demand; GenPT for AI-native Dynamic Application Security Testing (DAST) that simulates real-world attack techniques against web applications and APIs; GenVA for AI-driven vulnerability assessment that continuously scans and scores risks across your environment; and EASM for External Attack Surface Management that maps and monitors all external-facing assets, including shadow IT and exposed infrastructure. Together these capabilities deliver actionable intelligence across the full CTEM lifecycle, from asset discovery and attack surface mapping through to risk prioritization, validation, and remediation guidance. Security leaders gain the visibility, speed, and scalability needed to run continuous offensive security programs and generate strategic insights that maximize Return on Mitigation. Siemba is trusted by enterprises, global systems integrators, and government agencies looking to consolidate their offensive security tooling, reduce exposure windows, and demonstrate measurable security improvement over time.
Average Rating: 4.7/5.0
Total Reviews: 5
"Powerful All-in-One Solution for Lean Teams"
Rating: 5.0/5.0 stars
— Arun C.
"Great end to end tool for visibility and alerts for small teams"
Rating: 4.5/5.0 stars
— Mevin B.
Tanuki is the world's first AI-driven autonomous penetration testing platform. It makes pentesting radically more affordable, frequent, and consistent. By emulating the expertise of elite pentesters in AI software, we’ve turned a complex, expensive process into a simple, click-to-launch experience. What was once only accessible to large enterprises is now available to mid-market companies—on demand, NIST-compliant, and without compromising on quality.
Average Rating: 5.0/5.0
Total Reviews: 2
AI-generated summary from verified user reviews
"Both a customer and a valued partner"
Rating: 5.0/5.0 stars
— Neil B.
"Powerful, Seamless, and Customer-Loved."
Rating: 5.0/5.0 stars
— Aarun S.
AppSentinels protects your APIs by securing the business logic that drives your operations. Continuous discovery, automated API pen testing, and real-time defense stop hidden threats before they disrupt your business, ensuring seamless, risk-free innovation without slowing development.
Average Rating: 4.8/5.0
Total Reviews: 5
AI-generated summary from verified user reviews
"Essential Tool for API, MCP, and Agentic AI Security"
Rating: 5.0/5.0 stars
— Verified User in Financial Services
Rating: 5.0/5.0 stars
— Neha G.
BugBounter is a blockchain-based platform that brings corporations together with hundreds of registered freelance security researchers to discover, verify and report impactful cyber security vulnerabilities. We are based in Estonia, serving worldwide. Over 1500 researchers are registered and signed contract on our platform. Freelance security researchers on the platform produce better results than security teams and automated tests. Bounty programs stand out as the faster and more creative option in this area, while the cost-effectiveness to discover any critical vulnerability is much higher than what cyber security consulting companies deliver.
Average Rating: 4.5/5.0
Total Reviews: 1
"its great triage and response"
Rating: 4.5/5.0 stars
— Foysal Ahmed F.
At Com Olho, we are at the forefront of cybersecurity innovation, bringing together ethical hackers, security researchers, and organisations to strengthen digital defenses. Our platform provides a dynamic space where security experts can identify, report, and remediate vulnerabilities across a diverse range of systems. Com Olho is the first company to be granted a patent for system and method to detect advertising fraud at the Indian Patent Office, Government of India. The company also have patent for digital governance of online digital asset. Com Olho is incubated at NASSCOM 10000 Startups and part of NASSCOM DeepTech Club. The company was a recipient of a cash grant from Facebook for Business under Small Business Grant program. Com Olho is a registered name under Com Olho IT Private Limited. Com Olho has been recognized by Department for Promotion of Industry and Internal Trade, Ministry of Commerce and Industry, Government of India vide certificate number : DIPP45326. Com Olho is a Registered Trademark.
Average Rating: 4.8/5.0
Total Reviews: 3
AI-generated summary from verified user reviews
Rating: 5.0/5.0 stars
— Yatin C.
"Effective Bug Bounty Tool with Minor Drawbacks"
Rating: 5.0/5.0 stars
— Cheedella V.
CybaOps is a unified cyber security operations platform designed to simplify and scale modern security operations for IT teams, managed service providers (MSPs), and growing organisations. This comprehensive solution connects every aspect of your digital environment, including endpoints, cloud services, applications, networks, identities, and external attack surfaces, consolidating critical intelligence into a single, accessible interface. Many organisations face challenges not due to a lack of cyber security tools, but rather due to insufficient visibility, control, and effective management of cyber risks. As businesses expand, they often find themselves with fragmented security stacks that include various Security Information and Event Management (SIEM) tools, endpoint detection and response (EDR) systems, vulnerability scanners, and compliance platforms. This fragmentation can create blind spots, slow down incident response times, and complicate the prioritisation of security measures that truly matter. CybaOps addresses these challenges by serving as a central security operations platform, providing users with a complete, real-time overview of their cyber estate. By integrating Managed Detection and Response (MDR), SIEM capabilities, vulnerability management, compliance monitoring, penetration testing, and threat detection into one cohesive solution, CybaOps streamlines security operations. Security teams can monitor threats, investigate alerts, manage vulnerabilities, and track compliance seamlessly from a single platform, eliminating the need to switch between disparate tools. Key features of CybaOps include built-in automation and risk-based prioritisation, which significantly reduce alert fatigue and accelerate incident response efforts. This functionality enhances overall cyber resilience, allowing organisations to respond more effectively to potential threats. Designed for those who require enterprise-grade cyber security without the associated complexity, CybaOps supports frameworks such as Cyber Essentials and aligns with UK cyber security best practices. This ensures that businesses can strengthen compliance while maintaining continuous visibility across their environments. By integrating detection, investigation, and response with ongoing risk visibility, CybaOps empowers organisations to adopt a more proactive approach to cyber security. This platform not only helps reduce the attack surface but also improves cyber risk management, enabling organisations to transition from reactive fire-fighting to structured, scalable security operations.
Average Rating: 4.3/5.0
Total Reviews: 3
"Easy Onboarding, Simple Navigation, and Quick to Use"
Rating: 5.0/5.0 stars
— Denis A.
"CybaOps Portal: Easy to Navigate, Fast, and Backed by Great Support"
Rating: 4.5/5.0 stars
— josh@inventas.co.uk M.
FireCompass is an Agentic AI platform for autonomous penetration testing and red teaming across Web and API. It discovers shadow assets and web applications, safely validates what is exploitable, and connects findings into multi-stage attack paths with near-zero false positives. Unlike traditional scanners, it discovers credential reuse, business-logic flaws, privilege escalation, and app-to-app or app-to-network lateral movement. It can operate autonomously or with expert-in-the-loop validation. FireCompass has 30+ analyst recognitions across Gartner, Forrester, IDC, and is trusted by Fortune 1000 enterprises
Average Rating: 4.8/5.0
Total Reviews: 2
Rating: 5.0/5.0 stars
— Mabisha M.
"Good platform which do pen test and CART to show vulnerability"
Rating: 4.5/5.0 stars
— Verified User in Computer & Network Security
GamaShield a cutting-edge virtual hacker technology to identify and eradicate dangerous malware threats and website application vulnerabilities, a pre-breach tool designed to detect and prevent cyber attacks. GamaSec provides a portfolio of services including web vulnerability scanning, daily malware detection, blacklist monitoring and application Firewall (WAF) with DDoS detection. This combination of a proprietary security platform and industry knowhow enables GamaSec to deliver industry-leading solutions for website security.
Average Rating: 4.5/5.0
Total Reviews: 1
"GamaSec to detect and prevent web cyber exposure"
Rating: 4.5/5.0 stars
— Dave A.
Autonomous security testing platform that empowers businesses to hack themselves before the bad guys do.
Average Rating: 5.0/5.0
Total Reviews: 1
AI-generated summary from verified user reviews
"Comprehensive, Actionable Reports That Uncover Hidden Issues"
Rating: 5.0/5.0 stars
— Thomas .
