It's been two months since this profile received a new review

BugProve Reviews & Product Details

As former security researchers, we founded BugProve to deliver the level of security that IoT deserves! Experience peace of mind by leveraging our automated firmware analysis platform: Swift Results: Upload your firmware image and receive first results in just 5 minutes. - Supply Chain Risk Management and Compliance: Identify components and known vulnerabilities, and opt for continuous CVE monitoring for compliance assurance. - Zero-day detection: Our built-in zero-day detection engine, PRIS, detects memory corruption vulnerabilities before they can be exploited. - All-in-One Hub: Seamlessly access product security reevaluations, comparisons, and updates, presented in an easily digestible format. - Effortless Sharing: Share findings via live links or export them as PDFs for convenient reporting. Involve your product development team with AI-assisted remediation recommendations. - Accelerated Testing: Save weeks in the pentesting process, enabling you to focus on in-depth discoveries and launch more secure products, without security bottlenecks. - IoT specific, detailed scans: BugProve runs checks directly on firmware, no source code needed. We run advanced static and dynamic analysis, unique multi-binary taint analysis, cryptographic analysis, and security configuration checks. No long-term contracts, commitments, and hidden fees. What’s more, we believe you should test the platform to see what it can do, so we offer a Free Plan. Sign up, and start scanning!

Seller

BugProve

Discussions

BugProve Community

Languages Supported

English

Overview by

Gergő Hosszú

Pricing

Pricing provided by BugProve.

Free

With One-Time Purchase

Pro

Starting at $700.00

Per Month

View More Pricing Information

Top-Rated Alternatives

View All Alternatives

BugProve Media

Binaries are ranked according to their estimated vulnerabilities.

BugProve Demo - Zero-day vulnerability in a binary

Our PRIS engine highlights potential zero-day vulnerabilities in the code.

AI-driven explanation available for the found vulnerabilities to help understanding and reporting.

BugProve Demo - Known vulnerabilities & dependencies

List of CVEs present in the components of the uploaded firmware.

We check the relationship between private keys, public keys and certificates.

BugProve Reviews (20)

G2 reviews are authentic and verified.

Here's how.

Imre R.

Information Security Engineer

Small-Business (50 or fewer emp.)

12/3/2023

"BugProve has all the potential to be the leading platform for IoT security scanning"

4.5/5

What do you like best about BugProve?

Services that scan firmware images are often labelled pejoratively as grep-as-a-service. BugProve is more than that :) Next to the baseline functionality like finding the CVE entries of software component versions that are present in the firmware, it comes with some really cool and unique features. The built-in PRIS code analysis engine that is able to disassemble executables and identify security issues is a game changer. Collecting and sorting hard-coded cryptographic keys (incl. certificates) is also super useful. Review collected by and hosted on G2.com.

What do you dislike about BugProve?

BugProve is still a young product and as such you may encounter limitations around the technical analysis it does, or spot areas where the user experience could be improved. The good news is, the product keeps evolving and new features are shipped regularly. Review collected by and hosted on G2.com.

Barnabas S.

Cyber Security Architect

Oil & Energy

Enterprise (> 1000 emp.)

2/1/2024

"Securing the IoT Landscape: A Thorough Review of BugProve for Firmware Penetration Testing"

5/5

What do you like best about BugProve?

One of the standout features of BugProve is its ease of use. Navigating the platform is intuitive and straightforward, a massive advantage for beginners and seasoned professionals. However, the real game-changer here is the PRIS zero-day vulnerability scanner. This tool is revolutionary in the world of security testing. It not only automates the detection of critical vulnerabilities but also provides insightful information that can be invaluable for researchers and security architects. The depth of analysis it offers is truly commendable. Review collected by and hosted on G2.com.

What do you dislike about BugProve?

While BugProve has a lot going for it, there are a few areas where it could improve. Firstly, it would be great to see more context provided within PRIS. A more detailed breakdown of vulnerabilities and their potential impact could enhance the tool's utility. Additionally, real-time operating system support is something that many security professionals, including myself, would appreciate. The absence of card payment options may also inconvenience some users who prefer that payment method. Expanding payment options to cater to a broader audience would be a positive step forward. Review collected by and hosted on G2.com.

What problems is BugProve solving and how is that benefiting you?

BugProve is a revolutionary cybersecurity tool that addresses critical challenges in the industry. Its autonomous security testing capability saves time and money by automating the detection of critical vulnerabilities. This allows security professionals to focus on addressing these issues rather than spending countless hours manually identifying them. Additionally, BugProve excels at exposing hidden security issues within third-party components of IoT products, which are often overlooked but can be exploited by malicious actors. This level of scrutiny is crucial for maintaining the integrity and security of the supply chain in the context of IoT devices and firmware. Overall, BugProve is a valuable asset for researchers, industry experts, and security architects in their pursuit of safeguarding IoT products and supply chains from cybersecurity threats. Review collected by and hosted on G2.com.

Muhammad Asad Jahangir J.

Research Assistant

Small-Business (50 or fewer emp.)

6/21/2024

"I loved the tool, It's really easy to you."

4.5/5

What do you like best about BugProve?

As a researcher, I discovered this tool and was particularly impressed by its features and user-friendliness. The developers ensured that it is accessible to anyone, allowing users to extract the specific details they need. I used it for firmware analysis, and it significantly simplified my work. Review collected by and hosted on G2.com.

What do you dislike about BugProve?

Personally, I didn't find any drawbacks with this tool. It worked well and made my work much easier, as I previously mentioned. Review collected by and hosted on G2.com.

Gergo G.

CEO

Small-Business (50 or fewer emp.)

11/15/2023

"Awesome"

5/5

What do you like best about BugProve?

BugProve is an exceptional bug detection tool that has revolutionized the way I approach IoT security. Its user-friendly interface, customizable settings, and advanced reporting make it a game-changer in the industry. Review collected by and hosted on G2.com.

What do you dislike about BugProve?

I would really love to see an On-Prem version. Review collected by and hosted on G2.com.

What problems is BugProve solving and how is that benefiting you?

Powerful vulnerability discovery for C/C++ binaries

By employing advanced dynamic analysis techniques on binaries, we can find zero-day vulnerabilities in minutes.

Binary intelligence

We gather in-depth information on binaries and detect common hardening techniques like stack canaries, fortification, stripping, and so on.

Cryptographic analysis

We assess the strength of cryptographic algorithms, and discover relationships between private keys, public keys and certificates.

Composition analysis

We identify third-party dependencies and scan for known vulnerabilities, even without an explicit SBOM. Review collected by and hosted on G2.com.

Gergely E.

Small-Business (50 or fewer emp.)

8/9/2023

"Fast, in-depth security analysis delivered in minutes"

5/5

What do you like best about BugProve?

The comprehensive and automated security analysis it provides, combined with its user-friendly interface. It's impressive how it can analyze firmware and deliver a detailed security report within minutes. The addition of the zero-day detection engine, PRIS, which proactively identifies potential memory corruption vulnerabilities, is an outstanding feature that sets BugProve apart from other tools. Review collected by and hosted on G2.com.

What do you dislike about BugProve?

While BugProve offers a comprehensive suite of features, there are areas where it could improve. Providing more context to the PRIS engine's findings would enrich the understanding of detected vulnerabilities. Additionally, the inclusion of more advanced features, such as dynamic testing, fuzzing, and exploit generation, would greatly enhance the platform's scope and make it a more holistic security solution. Review collected by and hosted on G2.com.

What problems is BugProve solving and how is that benefiting you?

BugProve addresses critical IoT security challenges, including identifying firmware vulnerabilities, monitoring for known threats (CVEs), and detecting zero-day exploits. Notably, it can analyze a large number of firmwares, making it invaluable in situations where firmware is frequently updated. Furthermore, BugProve can pinpoint which firmware is affected by a new vulnerability, accelerating the remediation process. By offering automated, comprehensive analysis, BugProve saves time, reduces risk, and enhances security, making it an exceptional tool for maintaining robust IoT security in dynamic environments. Review collected by and hosted on G2.com.

Jaime S.

Small-Business (50 or fewer emp.)

11/5/2023

"The long nights student savior"

5/5

What do you like best about BugProve?

I really liked how quick BugProve is. I could get a complete security check in seconds to show my teacher's. The interface is beautiful!! even though I'm just a master's student and not an expert, it was easy for me to understand and use. Review collected by and hosted on G2.com.

What do you dislike about BugProve?

When you start a PRIS scan (amazing scan btw) you cant stop, and if you start a lot of them you will need to wait for them to finish to start another device scan. Review collected by and hosted on G2.com.

György B.

Small-Business (50 or fewer emp.)

11/20/2023

"Combined and user friendly vulnerability tool"

5/5

What do you like best about BugProve?

This tool can be used remotelly. We have to use our final product software for analysis, no intermediate build stages should be used. Our software can be seen as our customers see it.

The UI is cleen and trivial to use. Moreover, our products can be grouped and different releases can be compared. Reports can be generated, so asses to page is not necessary for everyone. Review collected by and hosted on G2.com.

What do you dislike about BugProve?

Few feature is missing, which is under development currently. Review collected by and hosted on G2.com.

Verified User in Medical Devices

Small-Business (50 or fewer emp.)

4/3/2024

"Quick and easy binary code analysis tool"

4/5

What do you like best about BugProve?

The tool is very user friendly and is extremely easy to setup and use. Review collected by and hosted on G2.com.

What do you dislike about BugProve?

The tool has limited support on the types of platforms and binary files it is able to scan. Review collected by and hosted on G2.com.

Giuseppe C.

Cyber Security Engineer

Small-Business (50 or fewer emp.)

7/25/2023

"Best Experience Ever"

5/5

What do you like best about BugProve?

Bug testing is fast and reliable and gives the idea of quality because of the simple, intuitive and beautiful GUI. In addition to the many functions it offers certainly the ability to perform "zero day" scans on the tracks is one of the strong features of the product. All this improves firmware analysis and speed in performing tests. Review collected by and hosted on G2.com.

What do you dislike about BugProve?

So far, I have not encountered any negative aspects. Maybe it would be interesting to give the possibility to use the product possibly on-prem instead of just using it in the cloud. Review collected by and hosted on G2.com.

Donát P.

Small-Business (50 or fewer emp.)

11/13/2023

"Gamechanger in IoT security"

5/5

What do you like best about BugProve?

The CI/CD integration makes our lives much easier. Complying with the upcoming regulation has never been so easy. Review collected by and hosted on G2.com.

What do you dislike about BugProve?

I would love to see config analysis a lot more. Review collected by and hosted on G2.com.

What problems is BugProve solving and how is that benefiting you?

Autonomous security testing is a real game-changer! Not only does it save you time and money by automating the detection of critical vulnerabilities, but it also shines a light on security issues that might be lurking in the 3rd party code of your IoT products. It's like having a superpower to control and monitor cybersecurity risks in your supply chain, in ways we never thought possible before! Review collected by and hosted on G2.com.