I like most about Cobalt is how simple and fast it makes security testing. Instead of long, complicated processes, it connects you with skilled testers on demand, so you can quickly find and fix issues. It feels more flexible, transparent, and easy to work with compared to traditional approaches.Easy to implement and use. Review collected by and hosted on G2.com.

Managing multiple issues/findings can get a bit overwhelming

Coordination with different testers may take extra effort. Review collected by and hosted on G2.com.

Cobalt provides practical, real‑world pentesting with actionable findings that are easy for engineers to understand and fix. The ability to interact with testers and quickly validate remediations makes security feel collaborative rather than audit‑driven. It fits well into modern development workflows without adding unnecessary friction. Review collected by and hosted on G2.com.

Pricing and scoping can feel less flexible for smaller or narrowly focused tests, and tester availability can vary depending on timing and skill set. Some findings can still lean toward generic issues, requiring follow‑up to confirm real business impact. Deeper guidance on prioritization across multiple assessments would be valuable. Review collected by and hosted on G2.com.

Cobalt makes managing penetration tests simple and transparent. The platform provides clear visibility into vulnerabilities as they’re discovered, real-time collaboration with pentesters, and an organized dashboard for tracking remediation. Their customer success and security teams are responsive and knowledgeable, helping ensure tests stay aligned with SOC 2 and enterprise requirements. Review collected by and hosted on G2.com.

The reporting and dashboard visuals could be more customizable, and the scheduling process sometimes feels rigid if timelines shift. It would also be helpful if communication between pentesters and internal teams were integrated more seamlessly with Slack or ticketing tools. Review collected by and hosted on G2.com.

I really appreciated the flexibility in scheduling our pen test, as well as the clear, consistent communication between our team and the pen testers throughout the process. Review collected by and hosted on G2.com.

We ran into an issue with a pen tester who performed a scan on our printer network, which caused the printers to spit out hundreds of pages of garbled text. We informed the tester about what happened and specifically asked that no further scans be run. Despite that, another scan was performed the next day, and the printers once again printed hundreds of pages. Review collected by and hosted on G2.com.

The support team is very good. They are quick to answer and willing to hop on a zoom when needed. Excellent communication and timely delivery. Review collected by and hosted on G2.com.

Cost does seem to be a bit higher vs. competitors we've looked into. My main complaint is their "60 day auto renewal". It's a very crummy way to lock people in. Rather dishonest in my opinion. Review collected by and hosted on G2.com.

We've been a Cobalt user for several years now (probably 5+ years). We first use them when they had limited reporting and reporting formats. They've improved that over the years which makes it super easy for us to share those reports externally or internally.

The pentesters that we've been assigned generally have been pretty solid for the discovery of findings and responsive when we need to clarify certain items.

The pricing is generally reasonable -- we've haven't done a competitive comparison of pricing in a few years. Review collected by and hosted on G2.com.

For customers of our size (smaller), we're not really engaged by the team to learn more about about what we can get out of the platform within our current pay scope. Obviously if we can get more for what we pay, we'd want to know what those features or other things are. Review collected by and hosted on G2.com.

I use Cobalt for penetration testing in my SaaS healthcare company, and I was really satisfied with it. Cobalt impressed me with their team's responsibility and the smooth onboarding process. Having a really helpful assistant for every aspect I had questions about was a bonus. The tool was really quick, and I found the fix and mitigation phase worked really well, which made us really happy. The initial setup was smooth, and the team was very responsible and responsive. If collaboration or pointing out findings related to my system was needed, Cobalt was really amazing. Review collected by and hosted on G2.com.

I would say that the reporting and the interface of the reports could be better, which is difficult internally. Since we add some findings, I needed to explain really deep to the management about the findings and their impact. Review collected by and hosted on G2.com.

I like that once I establish with Cobalt, I can just get back to them very well. I enjoy that I can treat each finding separately and have unlimited retests. I appreciate the good communication that uses the platform. Review collected by and hosted on G2.com.

I don't like that there is a minimum of five credits because I want to do segmentation penetration tests that are usually even below one credit of workload. So getting them for the cost of five credits doesn't make any sense. I would like there to be a possibility of a minimum number of credit being one for certain penetration tests, like PCI segmentation. Review collected by and hosted on G2.com.

the interface and the usability. It is very friendly for not tech resources Review collected by and hosted on G2.com.

I could not find anything that I dislike. Review collected by and hosted on G2.com.

I like Cobalt’s on-demand pen testing and the real-time, detailed reporting. They provide a faster path to getting tests started and receiving results, along with continuous findings and integrated reporting that delivers immediate insights. I also appreciate the integrations with ticketing systems, which help streamline workflows and improve efficiency. On top of that, the initial setup was very easy, so getting started felt smooth and straightforward. Review collected by and hosted on G2.com.

Can not think of anything! Works like a charm. Review collected by and hosted on G2.com.