APPCHECK Reviews & Product Details

Update: Having had a chance to test drive a few extra competing tools, I can attest that the VA reports produced by AppCheck are among the most professional-looking on the market. Review collected by and hosted on G2.com.

Update: The world is evolving towards continuous asset discovery and continuous/autonomous security testing. VA scanners are being phased out in favour of more modern CTEM platforms. AppCheck needs to embrace this trend if they are to remain relevant in 2026. Review collected by and hosted on G2.com.

AppCheck offers practical insights into vulnerabilities that could actually be exploited, rather than focusing on rare edge cases or harmless issues. Review collected by and hosted on G2.com.

AppCheck is most effective when used with simple applications, while more complex applications still need some manual testing in addition. AppCheck can deliver this service, and using both methods together is more effective than relying on either one alone. Review collected by and hosted on G2.com.

I like APPCHECK's ability to easily see vulnerabilities and assign them to owners, which removes the requirement for an external vulnerability register. The initial setup was super easy. Review collected by and hosted on G2.com.

I find the scanning of individual CVEs problematic. Review collected by and hosted on G2.com.

The pricing and functionality offered by AppCheck is excellent. The ability to manage your own scans for multiple Web Apps is excellent, and the report are clear and can be tailored by audience.

The account management and technical onboarding team have been particularly helpful, taking suggestions on board and supporting any issues we have faced.

New features and refinements are released on a regular basis which also adds to the the functionality and feel of the tooling itself. Review collected by and hosted on G2.com.

AppCheck could improve their scoring/categorization of vulnerabilities to align to the newest CVSS framework. Having said this, we have made suggestions to our account team who have assured us there is internal discussions ongoing.

Reports could also provide some more customization features such as the ability to manually add additional context etc Review collected by and hosted on G2.com.

We have used automated tools for years and always had to supplement with manual testing to ensure regularity of vuln discovery and ensure the automation hadn't missed vulns.

When we reviewed AppCheck, we also decided we needed to thoroughly assess the market. Their sales team contacted us at the right time and we decided to run a FREE trial, against 5 other DAST tools. We summarised that AppCheck was the best in coverage, best a vulnerability detection and surprisingly easy to use.

AppCheck found the most vulnerabilties across the Web App and API space, and gave us evidence they tested our APIs with good 200 responses, where others failed to get a response at all.

In addition to this, we had always found a problem with authentication and maintianing authentication with other tools in the past. Again not only did we get more vulnerabilities, AppCheck and the team there were able to show us that AppCheck had managed to authenticate for the duration of the test, and not just for part of it. As we have auth tokens that reset regularly, automation had traditionally struggled to authenticate. Finally, we no longer have to turn our 2FA systems off as AppCheck can authenticate with 2FA enabled, which we had never experienced before.

We have now saved 1000's of £££ in manual testing days

Thank you AppCheck team Review collected by and hosted on G2.com.

Nothing that imediately comes to mind, AppCheck was good in all analysed areas. Review collected by and hosted on G2.com.

We decided to use AppCheck to replace our yearly manual Pen Tests. AppCheck has covered this and more. Since the first contact with the company and all the way through onboarding, everyone has been very friendly and helpful. We got the first scan setup and started on our systems within the first two onboarding sessions, and we have not had any issues since. It is also clear that the people behind AppCheck knows what they are talking about, when it comes to security and scanning of software, web apps, and more. Additionally the possibility for continuous scans was a big benefit, so that we can run the checks as often as we like and ensure the security of our platform. The addition of an integration with our Jira account was a plus, to ease the workflow for fixing potential flaws. Review collected by and hosted on G2.com.

We do not have a lot to dislike about AppCheck, but there is always room for improvement. Further focus on the user experience, integrations and perhaps more templates or starting points for scans could be a benefit. Review collected by and hosted on G2.com.

Within few demo sessions we were able to create our specific scenarios for pentests. From taking into use, we handed out first tests to stakeholders internally and shifted focus from features to security. Really good and explanatory test results, which can be used in software department but also presentable to C level.

Appcheck definitely replaces manned pentests to an extent. It helps to improve day-to-day security and put focus on it. We were already able to integrate AppCheck to our CI/CD pipeline. Support at AppCheck helps quickly, even if it was users fault. The knowledge-base and FAQ should be an example to all SaaS providers out there. And within first few months of using, we can see continuous improvement in features and new functionality. Main benefit - both our tech team and C-level is happy.

Feature list and functionality described by technical sales team and reality was 1:1 match. Review collected by and hosted on G2.com.

First onboarding sessions could be replaced with tutorials or video lectures. And after that (or exam or checklist) we could have deeper dive with human to our specific tests/issues/results. Most of tech sector is living off of Youtube tutorials and how-to's - that's the way we've reached here. I did not see a huge benefit or value there. As first steps in using AppCheck are universal across all customers. It is not a dislike, but more of a room for improvement. Review collected by and hosted on G2.com.

AppCheck stands out for its thorough and reliable vulnerability scanning. I appreciate how it provides detailed, actionable reports that help prioritize fixes effectively. The user interface is intuitive, making it easy to schedule scans and review results. It’s also great that AppCheck integrates smoothly with existing CI/CD pipelines, which streamlines security testing during development Review collected by and hosted on G2.com.

The reporting interface can feel a bit cluttered, and some scan results require manual validation to avoid false positives Review collected by and hosted on G2.com.

Appcheck is simple to use, and the support is pretty responsive Review collected by and hosted on G2.com.

Its a bit annoying that the endpoints that you are licenced to use can only be changed by a service request, but they are changing this feature so they listen to customer feedback Review collected by and hosted on G2.com.

AppCheck is an excellent tool to provide full visibility into our estate and embed security into the CI/CD pipeline. Traditional pen testing provides too little too late. AppCheck allows us to identify issues early and fix them before they are released to production then continue to monitor the estate as new vulnerabilities are identified. This saves cost and valuable development time. The web interface is clear and easy to use and the reports provide guidance for how to fix the vulnerabilities. Our experience with AppCheck has been excellent from pre-sales through onboarding and support. They have been very responsive, listened to our questions and concerns and helped us to address them quickly. Implement is easy as long you as follow their guidance document. A big shout to Isaac, our account manager, for getting us to this point. Review collected by and hosted on G2.com.

The only thing we don’t like is having to raise a support ticket to amend the scan list. This is not a big problem but would be more convenient to be able to do it ourselves. Other than that – nothing! Review collected by and hosted on G2.com.