Bright Security has been a game-changer for our development workflow. The biggest advantage is how seamlessly it integrates into CI/CD pipelines without slowing down deployments. The platform is intuitive, and the automated scanning is fast yet thorough. I also appreciate the developer-focused approach issues are explained clearly with actionable remediation steps, which makes fixing vulnerabilities much easier. Their customer support has been responsive and helpful whenever we needed guidance. Review collected by and hosted on G2.com.

While the overall experience is great, the initial setup took a bit longer than expected because of the learning curve around configuring custom scan profiles. Also, the reporting dashboard could use more flexibility in customizing views for different stakeholders. Review collected by and hosted on G2.com.

The best thing is that it actually fits into how we work. Most scanners feel like they were built in 2005, but Bright feels modern. It doesn't scream about 500 "vulnerabilities" that turn out to be nothing. It only pings us for stuff that actually matters. Also, the remediation tips are actually written for human beings, not just robots, so my team knows exactly what to fix without a three-hour meeting. Review collected by and hosted on G2.com.

The UI can feel a little dense at first. There’s a lot going on in the dashboard, and it took me a few tries to find exactly where some of the scan settings were buried. Review collected by and hosted on G2.com.

I really like how Bright Security makes dynamic application and API security testing feel seamless in a developer’s day-to-day, with an intuitive interface, fast scans, real-time vulnerability validation, and minimal false positives that let me focus on real issues rather than noise it’s what makes security actually usable during development rather than only at the end Review collected by and hosted on G2.com.

While Bright’s scans and reports are solid, I wish it had better built-in mapping of API endpoints and deeper support for single-page apps, and sometimes linking results into broader enterprise-wide tools feels a bit limited compared to some legacy platforms Review collected by and hosted on G2.com.

The "Shift-Left" capability is genuine here, not just a marketing term. The support for modern architectures like GraphQL and REST APIs is excellent, and the customer success team is incredibly responsive—they’ve actually helped us build out our custom integrations rather than just sending us a link to a FAQ page. Review collected by and hosted on G2.com.

actually, pretty mucI’d love to see them expand their ecosystem more. Currently, they are top-tier for DAST (Dynamic Testing), but I wish they offered native SCA or SAST modules so I could manage my entire application security posture under one single vendor/contract rather than juggling multiple tools.h nothing which i do not like. Review collected by and hosted on G2.com.

Bright Security offers an intuitive and user-friendly interface, making it easy to navigate and manage security tasks efficiently, also Bright has good security checks for scanning web applications is the most important in the DAST. Bright stands out with its continuous improvement and timely updates, ensuring it stays ahead of competitors in the ever-evolving cybersecurity landscape. Review collected by and hosted on G2.com.

We thought it would be great if Bright had better tools to make a map of the application's API and to scan single-page apps more effectively. Bright should get better at working together with other security tools from different companies and let users customize things the way they like. Review collected by and hosted on G2.com.

Scanning and testing capabilities for frontend of your application are next level

Flexibility in reports generation

Constant meaningful improvements in Ease of Use in last year, for example Incremental app that analyzes entrypoints and triggers scans without having to set up the parameters relevant to each.

Customer Support is very helpful even when I am not from the security field. Support also are crucial for Ease of implementation, and follow up on a weekly basis on progress. Review collected by and hosted on G2.com.

More challenging for products that require frequent reinstall

Could use better integration with API scanning, like entrypoint discovery with target's swagger page

Need to improve flexibility in entrypoint management for a given project (mass edit, mass delete etc)

I would also suggest diversifying the licensing options:

I need to run multiple scans in short amount of time once every 2 months to test all products. Currently the license is for one engine, which means I can use it 24/7 but am limited to one running scan. Having an option for several engines that are time limited with frequency required would be useful, even a pay-as-you-go format would work well for these use cases. Review collected by and hosted on G2.com.

Bright Security is really simple to use. The cloud interface consents to perform high quality scan and to receive detailed reports. The repeater integration completes the features. The scan engine consents to perform high frequency of use scan without loss of performance. In Bright security I can appreciate the customer support quality. Review collected by and hosted on G2.com.

The online guide, perhaps is too long, with few examples to perform an easy implementation in some features (for example the repeater) Review collected by and hosted on G2.com.

Ease of use, Product efficiency, Support team on-ground Review collected by and hosted on G2.com.

As it is a DAST tool, sometimes the tool's necessity gets diluted because engineering team's consider it as a overhead. Review collected by and hosted on G2.com.

Ease of use, easy to understand and very user friendly. Review collected by and hosted on G2.com.

Due to configuration changes or such from the Brightside often times the scan fails with no apparent reason. Review collected by and hosted on G2.com.

Near real-time vulnerability detection as well as automated security testing. Review collected by and hosted on G2.com.

Complexity in setting up the tool where the appsec team is lean it gets difficult to scale. Review collected by and hosted on G2.com.