apisec.ai Pricing Overview

I found the tool to be quite easy to use and straightforward. I believe the scanner provides a really good in-depth and wide coverage of the API, with minimal configuration. I do like the way that information is presented quickly on the dashboard, making it easy to analyze the results.

I think the App Model guide is also a big plus, as it allows you to understand the next steps that should be taken to cover all cases in your API. Also, the security coverage shows the tool compromise to go way further than the OWASP API Security Top 10 and much more, delivering way more than other solutions in the field.

The integration with a ticketing system and the ability to share with other teams the results is something many will value. Overall, I see this tool becoming one of my go-to solutions for API security assessments. Review collected by and hosted on G2.com.

I didn’t encounter any major drawbacks while using the tool. Initially, I looked for written documentation but only found the Help Center, which primarily consists of video tutorials. While I appreciate videos, I often prefer written documentation that allows for quick navigation via an index or keyword search.

HAving said that, this is more of a personal preference rather than a real issue, as the tool is intuitive and easy to use, requiring minimal explanation. Review collected by and hosted on G2.com.

APIsec provides comprehensive API security testing that goes beyond basic DAST tests to find complex vulnerabilities like logic flaws and authorization gaps. The platform offers continuous assessment capabilities that integrate seamlessly into CI/CD pipelines, making it ideal for DevSecOps implementations. The solution takes a proactive rather than reactive approach to API security, which provides greater peace of mind according to customer testimonials. Their automated vulnerability testing covers all OWASP API Security Top 10 risks, ensuring thorough protection. The detailed reporting is tailored for different stakeholders including executives, security teams, and developers. Review collected by and hosted on G2.com.

The platform appears to be primarily focused on testing rather than offering a complete API security solution that includes runtime protection. There's no clear indication of how the solution handles legacy APIs that might not be integrated into modern CI/CD pipelines. The marketing materials don't specify pricing structure or indicate whether there might be scaling challenges for organizations with hundreds of APIs. There's limited information about how much configuration or customization is required to get meaningful results. The emphasis on shift-left testing is valuable but may not address already-deployed APIs effectively. Review collected by and hosted on G2.com.