Performs thousands of security checks covering common vulnerabilities such as the OWASP Top 10, known CVEs, and API security issues. It supports authenticated scans for applications behind login pages. Review collected by and hosted on G2.com.

Some users report that automated scans flag vulnerabilities that later require manual verification, which can add extra investigation time Review collected by and hosted on G2.com.

I appreciated that Astra Pentest was very responsive and professional. They are attentive and very accommodating, with quality advice. They provided an important pentest certificate for our business. Thanks to a chat on Slack, they were able to answer all our questions quickly and perfectly assisted us in resolving issues. I consider their service to be good value for money, with good support. Review collected by and hosted on G2.com.

We had some false positives that were diagnosed by the automatic scans. It was a bit complicated to understand at first. Everything became clearer with use. Review collected by and hosted on G2.com.

Very thorough with the pen test review and very responsive throughout. They completed the reviews ahead of the ETA they shared with us. Review collected by and hosted on G2.com.

Not about dislike, but I have a couple of suggestions:

1. Navigation can be made a bit easier. I had to struggle a few times to locate the manual pentest.

2. More notifications would help when a certificate is about to expire. Review collected by and hosted on G2.com.

Astra Pentest delivers clear, actionable security findings and offers an intuitive platform for tracking remediation. The team is highly responsive, and the report quality makes the vulnerability management process noticeably more efficient and easier to manage. Review collected by and hosted on G2.com.

Nothing significant comes to mind. The platform and service worked well for our needs, and whenever we had questions or concerns, the team addressed them promptly. Overall, everything ran smoothly and met our expectations. Review collected by and hosted on G2.com.

The console, automated tests, and most importantly the consultation / support are the differentiating factors. Shruthi, assigned consultant, really went the extra mile. Review collected by and hosted on G2.com.

The standard re-test timelines can be difficult for some to remediate the issues in time Review collected by and hosted on G2.com.

Astra’s team was responsive, collaborative, and genuinely a pleasure to work with throughout the pentesting process. Overall, it felt like a solid investment choice. Review collected by and hosted on G2.com.

As the product is more geared towards automated continuous reporting, navigating around the ui to find information on the human/manual pentesting was a little clunky. Review collected by and hosted on G2.com.

I really like how the web platform of Astra Pentest makes it easy to track and fix simple errors with the web interface. It allows the manual pentest team to focus more on the complex issues. The setup was pretty easy, although we did have to make a minor alteration to our platform's login system, but that was only needed on our testing site. Review collected by and hosted on G2.com.

It's not specific to Astra, but manual pentesting does have lead time of a few weeks Review collected by and hosted on G2.com.

Astra is quite straightforward to get started with. The onboarding process was smooth, and the user interface is intuitive, allowing you to initiate a pentest without any hassle. Their support team typically responds quickly and ensures progress continues without delays. The vulnerability reports are well-organized, clear, and actionable, which also contributes to faster remediation. Review collected by and hosted on G2.com.

There were occasions when I needed to reach out to support to have certain items revalidated or to confirm that everything was addressed. Having a more transparent logging system would make the process easier to follow and would help eliminate unnecessary guesswork. Review collected by and hosted on G2.com.

Astra’s manual pentest is a really good feature. Review collected by and hosted on G2.com.

Astra could add an MFA-based login feature to its automated web pentest method. Review collected by and hosted on G2.com.

Clear, well-documented findings with severity classifications that made it easy to prioritize remediation. The dashboard gives good visibility into the status of each finding and overall progress toward certification. The customer success team was helpful and responsive whenever we reached out. Review collected by and hosted on G2.com.

The initial setup and onboarding could be smoother for first-time users. Review collected by and hosted on G2.com.