# Astra Pentest vs ZAP by Checkmarx Comparison
---
## AI Generated Summary
- **G2 reviewers report** that Astra Pentest excels in customer support, with users highlighting the team's professionalism and responsiveness during manual penetration tests. One user noted, "Support works were highly encouraging, communication process smooth," which reflects a strong commitment to customer service.
- **Users say** that ZAP by Checkmarx offers valuable automated scanning features that save time and provide comprehensive reports. Reviewers appreciate the variety of report formats available, making it convenient for different use cases. One user mentioned, "I find the automated scans in ZAP by Checkmarx help me save time and offer valuable reports and suggestions."
- **According to verified reviews** , Astra Pentest has a significantly higher overall satisfaction score compared to ZAP by Checkmarx, indicating a more favorable user experience. Users have expressed their satisfaction with Astra's quick implementation process and the intuitive onboarding wizard, which enhances usability.
- **Reviewers mention** that while ZAP by Checkmarx is praised for its open-source nature and extensive features, some users feel it may not be as user-friendly as Astra Pentest. One user stated, "ZAP has more automated scan features... but it can be complex for new users," suggesting a potential learning curve.
- **Users highlight** that Astra Pentest's reporting and analytics capabilities are robust, with a score that reflects its effectiveness in tracking vulnerabilities. One reviewer noted, "The reporting features are excellent, making it easy to understand the security posture," which is crucial for ongoing security assessments.
- **G2 reviewers indicate** that while both products cater to small businesses, Astra Pentest has a broader appeal with a higher number of reviews, suggesting a more established presence in the market. This could be a deciding factor for businesses looking for a reliable partner in penetration testing.



| | Astra Pentest | ZAP by Checkmarx | 
|---|---|---|
| **Star Rating** | 4.6 out of 5 | 4.7 out of 5 | 
| **Total Reviews** | 214 | 14 | 
| **Largest Market Segment** | Small-Business (67.3% of reviews) | Small-Business (76.9% of reviews) | 
| **Entry Level Price** | $199.00 Per Month | Free | 

---
## Top Pros & Cons

### Astra Pentest

Pros:
- Customer Support (65 reviews)
- Vulnerability Detection (52 reviews)

Cons:
- Poor Customer Support (12 reviews)
- Poor Interface Design (10 reviews)

### ZAP by Checkmarx

Pros:
- Easy Integrations (3 reviews)
- Pentesting Efficiency (3 reviews)

Cons:
- False Positives (3 reviews)
- Poor Documentation (2 reviews)

---
## Ratings Comparison
| Rating | Astra Pentest | ZAP by Checkmarx | 
|---|---|---|
  | **Meets Requirements** | 9.3 (188 reviews) | 9.6 (12 reviews) | 
  | **Ease of Use** | 9.0 (191 reviews) | 9.0 (12 reviews) | 
  | **Ease of Setup** | 9.1 (163 reviews) | Not enough data | 
  | **Ease of Admin** | 9.0 (92 reviews) | Not enough data | 
  | **Quality of Support** | 9.3 (186 reviews) | 8.1 (12 reviews) | 
  | **Has the product been a good partner in doing business?** | 9.3 (91 reviews) | Not enough data | 
  | **Product Direction (% positive)** | 9.3 (184 reviews) | 10.0 (11 reviews) | 

---
## Pricing

### Astra Pentest

#### Entry-Level Pricing

Plan: Scanner

Price: $199.00 Per Month

Description: Interactive dashboard with unlimited vulnerability scans, vetted scan reports, unlimited integration with CI/CD tools.

Key Features:
- Unlimited vulnerability scans with 10,000+ tests (OWASP, SANS etc.)
- Unlimited integrations with CI/CD tools, Slack, Jira & more
- Four expert vetted scan results to ensure zero false positives when billed yearly

[Browse all 3 editions](https://www.g2.com/products/astra-pentest/pricing)

#### Free Trial

Yes

### ZAP by Checkmarx

#### Entry-Level Pricing

Plan: Open source

Price: Free

Key Features:
- Everything

[Learn more about ZAP by Checkmarx](https://www.g2.com/products/zap-by-checkmarx/reviews)

#### Free Trial

Yes

---
## Features Comparison By Category

### Website Security

| Product | Score | Reviews |
|---|---|---|
| **Astra Pentest** | 9.1/10 | 12 |
| **ZAP by Checkmarx** | N/A | N/A |

#### Administration

| Feature | Astra Pentest | ZAP by Checkmarx | 
|---|---|---|
| **Content Delivery** | Not enough data | Not enough data | 
| **Dashboard & Reporting** | 9.3 (10 reviews) | Not enough data | 
| **Alerting** | 9.4 (8 reviews) | Not enough data | 

#### Risk Analysis

| Feature | Astra Pentest | ZAP by Checkmarx | 
|---|---|---|
| **Blacklist and Whitelist** | Not enough data | Not enough data | 
| **Vulnerability Assessment** | 9.1 (9 reviews) | Not enough data | 
| **Security Auditing** | 9.3 (10 reviews) | Not enough data | 

#### Threat Protection

| Feature | Astra Pentest | ZAP by Checkmarx | 
|---|---|---|
| **Firewall** | Not enough data | Not enough data | 
| **DDoS Protection** | Not enough data | Not enough data | 
| **Malware Detection** | Not enough data | Not enough data | 
| **Malware Removal** | Not enough data | Not enough data | 

#### Generative AI

| Feature | Astra Pentest | ZAP by Checkmarx | 
|---|---|---|
| **AI Text Summarization** | Not enough data | Not enough data | 

### Penetration Testing

| Product | Score | Reviews |
|---|---|---|
| **Astra Pentest** | 8.7/10 | 137 |
| **ZAP by Checkmarx** | 8.4/10 | 13 |

#### Administration

| Feature | Astra Pentest | ZAP by Checkmarx | 
|---|---|---|
| **API / Integrations** | 8.2 (113 reviews) | 8.3 (12 reviews) | 
| **Extensibility** | 8.1 (107 reviews) | 8.8 (12 reviews) | 
| **Reporting and Analytics** | 9.0 (122 reviews) | 8.8 (12 reviews) | 

#### Analysis

| Feature | Astra Pentest | ZAP by Checkmarx | 
|---|---|---|
| **Issue Tracking** | 9.0 (122 reviews) | 8.1 (12 reviews) | 
| **Reconnaissance** | 8.9 (114 reviews) | 8.2 (12 reviews) | 
| **Vulnerability Scan** | 9.0 (127 reviews) | 9.4 (12 reviews) | 

#### Testing

| Feature | Astra Pentest | ZAP by Checkmarx | 
|---|---|---|
| **Command-Line Tools** | 7.4 (97 reviews) | 7.6 (12 reviews) | 
| **Manual Testing** | 8.9 (119 reviews) | 7.5 (12 reviews) | 
| **Test Automation** | 9.0 (106 reviews) | 8.6 (12 reviews) | 
| **Performance and Reliability** | 9.0 (114 reviews) | 8.9 (12 reviews) | 

### Dynamic Application Security Testing (DAST)

| Product | Score | Reviews |
|---|---|---|
| **Astra Pentest** | 8.4/10 | 28 |
| **ZAP by Checkmarx** | N/A | N/A |

#### Administration

| Feature | Astra Pentest | ZAP by Checkmarx | 
|---|---|---|
| **API / Integrations** | 8.3 (23 reviews) | Not enough data | 
| **Extensibility** | 8.1 (23 reviews) | Not enough data | 

#### Analysis

| Feature | Astra Pentest | ZAP by Checkmarx | 
|---|---|---|
| **Reporting and Analytics** | 8.4 (24 reviews) | Not enough data | 
| **Issue Tracking** | 8.7 (24 reviews) | Not enough data | 
| **Static Code Analysis** | 8.3 (24 reviews) | Not enough data | 
| **Vulnerability Scan** | 9.1 (27 reviews) | Not enough data | 
| **Code Analysis** | 7.8 (23 reviews) | Not enough data | 

#### Testing

| Feature | Astra Pentest | ZAP by Checkmarx | 
|---|---|---|
| **Manual Testing** | 8.1 (24 reviews) | Not enough data | 
| **Test Automation** | 8.8 (23 reviews) | Not enough data | 
| **Compliance Testing** | 8.1 (23 reviews) | Not enough data | 
| **Black-Box Scanning** | 8.5 (20 reviews) | Not enough data | 
| **Detection Rate** | 8.9 (22 reviews) | Not enough data | 
| **False Positives** | 7.6 (22 reviews) | Not enough data | 

### Vulnerability Scanner

| Product | Score | Reviews |
|---|---|---|
| **Astra Pentest** | 8.7/10 | 117 |
| **ZAP by Checkmarx** | N/A | N/A |

#### Performance

| Feature | Astra Pentest | ZAP by Checkmarx | 
|---|---|---|
| **Issue Tracking** | 9.0 (93 reviews) | Not enough data | 
| **Detection Rate** | 8.8 (84 reviews) | Not enough data | 
| **False Positives** | 7.5 (86 reviews) | Not enough data | 
| **Automated Scans** | 8.9 (93 reviews) | Not enough data | 

#### Network

| Feature | Astra Pentest | ZAP by Checkmarx | 
|---|---|---|
| **Compliance Testing** | 8.8 (88 reviews) | Not enough data | 
| **Perimeter Scanning** | 8.6 (70 reviews) | Not enough data | 
| **Configuration Monitoring** | 8.7 (70 reviews) | Not enough data | 

#### Application

| Feature | Astra Pentest | ZAP by Checkmarx | 
|---|---|---|
| **Manual Application Testing** | 9.1 (94 reviews) | Not enough data | 
| **Static Code Analysis** | 7.9 (69 reviews) | Not enough data | 
| **Black Box Testing** | 8.8 (69 reviews) | Not enough data | 

#### Agentic AI - Vulnerability Scanner

| Feature | Astra Pentest | ZAP by Checkmarx | 
|---|---|---|
| **Autonomous Task Execution** | 8.9 (6 reviews) | Not enough data | 
| **Proactive Assistance** | 9.2 (10 reviews) | Not enough data | 

### API Security

| Product | Score | Reviews |
|---|---|---|
| **Astra Pentest** | N/A | N/A |
| **ZAP by Checkmarx** | N/A | N/A |

#### API Management 

| Feature | Astra Pentest | ZAP by Checkmarx | 
|---|---|---|
| **API Discovery** | Not enough data | Not enough data | 
| **API Monitoring** | Not enough data | Not enough data | 
| **Reporting** | Not enough data | Not enough data | 
| **Change Management** | Not enough data | Not enough data | 

#### Security Testing

| Feature | Astra Pentest | ZAP by Checkmarx | 
|---|---|---|
| **Compliance Monitoring** | Not enough data | Not enough data | 
| **API Verification** | Not enough data | Not enough data | 
| **API Testing** | Not enough data | Not enough data | 

#### Security Management

| Feature | Astra Pentest | ZAP by Checkmarx | 
|---|---|---|
| **Security and Policy Enforcement** | Not enough data | Not enough data | 
| **Anomoly Detection** | Not enough data | Not enough data | 
| **Bot Detection** | Not enough data | Not enough data | 

### Cloud Security

| Product | Score | Reviews |
|---|---|---|
| **Astra Pentest** | N/A | N/A |
| **ZAP by Checkmarx** | N/A | N/A |

#### Cloud Visibility

| Feature | Astra Pentest | ZAP by Checkmarx | 
|---|---|---|
| **Data Discovery** | Not enough data | Not enough data | 
| **Cloud Registry** | Not enough data | Not enough data | 
| **Cloud Gap Analytics** | Not enough data | Not enough data | 

#### Security

| Feature | Astra Pentest | ZAP by Checkmarx | 
|---|---|---|
| **Data Security** | Not enough data | Not enough data | 
| **Data loss Prevention** | Not enough data | Not enough data | 
| **Security Auditing** | Not enough data | Not enough data | 

#### Identity

| Feature | Astra Pentest | ZAP by Checkmarx | 
|---|---|---|
| **SSO** | Not enough data | Not enough data | 
| **Governance** | Not enough data | Not enough data | 
| **User Analytics** | Not enough data | Not enough data | 

---
## Categories
**Shared Categories (2):** [Dynamic Application Security Testing (DAST) Software](https://www.g2.com/categories/dynamic-application-security-testing-dast), [Penetration Testing Tools](https://www.g2.com/categories/penetration-testing-tools)

**Unique to Astra Pentest (3):** [API Security Tools](https://www.g2.com/categories/api-security), [Vulnerability Scanner Software](https://www.g2.com/categories/vulnerability-scanner), [Website Security Software](https://www.g2.com/categories/website-security)



---
## Reviewer Demographics

### By Company Size

| Segment | Astra Pentest | ZAP by Checkmarx | 
|---|---|---|
| **Small-Business** | 67.3% | 76.9% | 
| **Mid-Market** | 28.8% | 7.7% | 
| **Enterprise** | 3.8% | 15.4% | 

### By Industry

#### Astra Pentest

- **Computer Software:** 28.9%
- **Information Technology and Services:** 21.8%
- **Financial Services:** 6.6%
- **Hospital & Health Care:** 5.1%
- **Computer & Network Security:** 4.6%
- **Health, Wellness and Fitness:** 3.0%
- **Education Management:** 2.5%
- **E-Learning:** 2.0%
- **Human Resources:** 2.0%
- **Banking:** 1.5%
- **Other:** 21.8%

#### ZAP by Checkmarx

- **Computer & Network Security:** 41.7%
- **Information Technology and Services:** 25.0%
- **Computer Software:** 16.7%
- **Internet:** 8.3%
- **Hospital & Health Care:** 8.3%

---
## Alternatives

### Alternatives to Astra Pentest

- [Intruder](https://www.g2.com/products/intruder/reviews) — 4.8/5 stars (208 reviews)
- [Tenable Nessus](https://www.g2.com/products/tenable-nessus/reviews) — 4.5/5 stars (303 reviews)
- [Wiz](https://www.g2.com/products/wiz-wiz/reviews) — 4.7/5 stars (826 reviews)
- [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (897 reviews)
- [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) — 4.5/5 stars (618 reviews)
- [Red Hat Ansible Automation Platform](https://www.g2.com/products/red-hat-ansible-automation-platform/reviews) — 4.6/5 stars (377 reviews)
- [Postman](https://www.g2.com/products/postman/reviews) — 4.6/5 stars (1791 reviews)
- [Orca Security](https://www.g2.com/products/orca-security/reviews) — 4.7/5 stars (301 reviews)
- [Harness Platform](https://www.g2.com/products/harness-platform/reviews) — 4.6/5 stars (304 reviews)
- [Gearset DevOps](https://www.g2.com/products/gearset-devops/reviews) — 4.7/5 stars (294 reviews)

### Alternatives to ZAP by Checkmarx

- [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (897 reviews)
- [Tenable Nessus](https://www.g2.com/products/tenable-nessus/reviews) — 4.5/5 stars (303 reviews)
- [Harness Platform](https://www.g2.com/products/harness-platform/reviews) — 4.6/5 stars (304 reviews)
- [Acunetix by Invicti](https://www.g2.com/products/acunetix-by-invicti/reviews) — 4.1/5 stars (105 reviews)
- [Intruder](https://www.g2.com/products/intruder/reviews) — 4.8/5 stars (208 reviews)
- [Burp Suite](https://www.g2.com/products/burp-suite/reviews) — 4.8/5 stars (129 reviews)
- [Invicti (formerly Netsparker)](https://www.g2.com/products/invicti-formerly-netsparker/reviews) — 4.5/5 stars (71 reviews)
- [vPenTest](https://www.g2.com/products/vpentest/reviews) — 4.6/5 stars (240 reviews)
- [Metasploit](https://www.g2.com/products/metasploit/reviews) — 4.6/5 stars (55 reviews)
- [Cobalt](https://www.g2.com/products/cobalt-io-cobalt/reviews) — 4.5/5 stars (178 reviews)

---
## Top Discussions

### Astra Pentest

- Title: [What is Astra Pentest used for?](https://www.g2.com/discussions/what-is-astra-pentest-used-for) — 2 comments *(includes official response)*
  > **Top comment:** "Astra's Pentest is a comprehensive pentest solution with an intelligent automated vulnerability scanner coupled with in-depth manual pentesting. It emulates..."

### ZAP by Checkmarx

No discussions available for this product.

---
**Source:** [G2.com](https://www.g2.com) | [Comparison Page](https://www.g2.com/compare/astra-pentest-vs-zap-by-checkmarx)