Cobalt provides an excellent balance of flexibility and expertise in penetration testing. I like how their platform makes it easy to track findings, communicate directly with testers, and manage retesting. The talent and professionalism of their pentesters stand out—they deliver actionable results, not just reports. The continuous visibility into progress and remediation guidance is a huge value add. Review collected by and hosted on G2.com.

The only drawback is that scheduling can sometimes take longer than expected, especially for retesting or specialized scopes. While the platform is solid, the interface could be a bit more intuitive for tracking test progress and filtering findings. These are minor compared to the overall value Cobalt provides, but improvements here would make the experience even smoother. Review collected by and hosted on G2.com.

Our organisation been using cobalt for about 3 hrs for application security external pentesting. The features which are best are:

- Easy and indefinite access of reports that available.

- Amazing customer support that they provide to streamline the entire process

- User Interface is very beginner friendly make it easy to integrate or start any new intiative.

- Our organization uses this very frequent for getting the external pentesting done.

- One of the best part is cobalt pentesting team provides detailled documentation and steps for any vulnerabilities that are identified. This makes the process very smooth and triaging becomes very easy. Review collected by and hosted on G2.com.

Cobalt credits are bit costly, which makes it difficult if you have very scope of applications. Review collected by and hosted on G2.com.

I recently used Cobalt for a penetration test and had a great experience. The team was professional, thorough, and highly responsive throughout the process. Their platform made collaboration easy, and the final report was clear, detailed, and actionable. It’s been great working with Claire Beaudron — she’s professional, responsive, and a pleasure to collaborate with. I’d definitely recommend Cobalt for reliable and efficient pentesting services. Review collected by and hosted on G2.com.

nothing evreything went smooth. Team was very supportive Review collected by and hosted on G2.com.

I appreciate how Cobalt aids in automating pen testing as a service, which simplifies security measures for our team and significantly enhances our security framework. It is capable of providing realistic attack simulations, mimicking what actual security breaches would look like, which has been incredibly helpful for our team in preparing and fortifying our security posture. Setting up Cobalt was fairly easy and straightforward, making the initial transition smooth despite some complexities with back-end configuration and access management. Moreover, Cobalt helps us maintain HIPAA compliance, which is crucial for our operations, thereby reinforcing our decision to continue the partnership. Its compliance capabilities stand out as a major benefit, ensuring that we adhere to necessary regulations, which is a top priority for us. Review collected by and hosted on G2.com.

{"I find that Cobalt could benefit from having a more comprehensive suite of cybersecurity products. Currently, it feels somewhat limited and heavily focused on pen tests. Expanding its range of capabilities beyond pen tests would make it a more holistic cybersecurity solution."} Review collected by and hosted on G2.com.

Cobalt offers Pentest as a service (PTaaS). When we started working on it, our goal was to strengthen our application security by incorporating on-demand pentesting services. The platform allows us to deploy faster pentests, and real-time collaboration with security experts. We use Cobalt's service every quarter. We have also integrated our CI/CD pipeline with Cobalt’s PTaaS model. The platform is also user-friendly to manage vulnerability findings seamlessly. Platform support is exceptional as usual. Review collected by and hosted on G2.com.

Cobalt is a little more expensive than other traditional penetration testing. For small organizations, it is on the higher side. Review collected by and hosted on G2.com.

Ease of use, allowing us to see from the beginning how many credits will be needed for the test, also the communication with the assigned team members is always fast and reliable. Review collected by and hosted on G2.com.

We haven't faced any downsides of using Cobalt, from our current status and requirements they are a reliable partner we can trust to test our environments. Review collected by and hosted on G2.com.

Cobalt makes managing penetration tests simple and transparent. The platform provides clear visibility into vulnerabilities as they’re discovered, real-time collaboration with pentesters, and an organized dashboard for tracking remediation. Their customer success and security teams are responsive and knowledgeable, helping ensure tests stay aligned with SOC 2 and enterprise requirements. Review collected by and hosted on G2.com.

The reporting and dashboard visuals could be more customizable, and the scheduling process sometimes feels rigid if timelines shift. It would also be helpful if communication between pentesters and internal teams were integrated more seamlessly with Slack or ticketing tools. Review collected by and hosted on G2.com.

Easy to start, quite easy to use. The thing I love most about cobalt is the ability to quickly organise a pentest for new releases or changes in product/infrastructure. Review collected by and hosted on G2.com.

Attack surface in real life is pretty useless. DAST functionality and value are also quite questionable, so for me, these things are just marketing. Review collected by and hosted on G2.com.

Ability to launch pentests quickly without unnecessary overhead.

High quality of researchers and relevance of reported vulnerabilities.

Clear testing process and good communication throughout engagements.

The platform facilitates smooth collaboration between internal teams and pentesters.

Reports are well-structured, with clearly defined severity and business impact.

Slack integration and real-time interaction with researchers.

Flexibility in scoping and scheduling tests. Review collected by and hosted on G2.com.

Pricing structure can be less flexible for smaller or ongoing engagements. Review collected by and hosted on G2.com.

The best thing about Cobalt is how it simplifies vulnerability management — everything from scheduling to reviewing findings is super organized. Review collected by and hosted on G2.com.

The reporting and dashboard could be a bit more customizable. It works well, but having more flexibility in filtering or exporting data would make it even better Review collected by and hosted on G2.com.