Escape Reviews & Product Details

Escape is built with a wide range of protocols in mind and shows a strong understanding of how they work. In particular, I really liked how it handles GraphQL operations. I’ve gotten better results than with traditional DASTs.

The UI/UX offers a lot of transparency into what the tool is doing and how it reports issues. Filtering is excellent, and it’s easy to adapt it to whatever prioritization matrix you use. Scans are also quick.

Escape comes with the baseline integrations you need from day one. It covers the same integrations you’d expect from other DAST platforms, and the team is quick to work with you on new ones when there’s enough interest and it improves the overall experience.

Support has been consistently strong: they typically respond within half a day and do a great job helping resolve issues. They’re also willing to jump on calls to debug and fix things together.

Escape's AI Copilot is great on its own, but if you want to extend it further, you can use Escape MCP with other AI tools to build your own triage pipelines with custom context and knowledge.

I was an early adopter of Escape, and their pricing has been fair since day one. Review collected by and hosted on G2.com.

I’m mostly going to nitpick here.

Escape could elevate the UX tremendously and connect its offerings more cohesively. It supports GraphQL schema files, but there’s no way to automate schema file updates. It would be a huge help if it had GitHub integration so it could automatically discover and pull schema files.

Similarly, Escape Copilot is great at reasoning with the information that’s available, but that alone isn’t enough for me to fully trust its reasoning when the goal is to reduce triage time.

Right now, I run custom pipelines via Escape’s MCP for triage agents, using my own code knowledge for correlation. If they introduce GitHub integration, they could leverage it to provide better triage outcomes.

They could also improve the UX around load times. The platform takes a while to load pages and profiles.

Lastly, Escape could improve their APIs & other component with customer side automations in mind. Escape generate good reports but there is no automated way to export those as PDFs. You have to manually fetch the data via API and format it where the escape insights and presentation is lost. Review collected by and hosted on G2.com.

Escape has an excellent modern approach to DAST testing making it easy to manage complex single threaded scans. One of the nicest/underated features is the screen capturing in scan logs allowing teams to quickly validate if authentication has occured and to assess product coverage. Review collected by and hosted on G2.com.

Since it is a start up there are some features missing but they have added them to the roadmap and quickly iterate through version based on user feedback a rarity in a stagnant market. Review collected by and hosted on G2.com.

We have been using Escape platform for a couple years since the beginning of their product. It effectively addresses the pain points in API security management! The tool excels in detecting a wide range of API vulnerabilities, including business logic flaws often missed by other solutions. Review collected by and hosted on G2.com.

The updates to the platform, while ensuring we always have access to the latest features and security enhancements, can sometimes require a bit of adjustment on our part. Nevertheless, the benefits of the tool far outweigh this minor inconvenience, and we look forward to seeing how the platform evolves to balance innovation with user familiarity. Review collected by and hosted on G2.com.

Easy to setup

Easy to integrate to your CI/CD

Public and private internal APIs supported

Nice advices and examples for your developers to address issues

Capacity to create workflows Review collected by and hosted on G2.com.

Small company, which could block the purchasing process in some large companies.

Not yet recognized company even if their product is great Review collected by and hosted on G2.com.

Easy to integrate. Helped to quickly check and make sure our GraphQL endpoints were secure. Great customer support as well. Review collected by and hosted on G2.com.

No complaints here. Worked great for us. Review collected by and hosted on G2.com.

Escape is very easy to use and very easy to get setup up. I love how you can continuously run scans to verify if the issues found were addressed. Escape also has an awesome support team who work really hard to provide you with the best product they can. Review collected by and hosted on G2.com.

I wish escape can scan large GraphQL schemas but they are coming out with newer features with with more HorsePower which should address this issue. Review collected by and hosted on G2.com.

It was very difficult to find an effective security tool for GraphQL so I was very relieved to find the Escape Tech scanner. It's a really great fit for securing our GraphQL endpoints and I am impressed overall with how the product operates. Review collected by and hosted on G2.com.

User friendly features are still being developed, functionality is definitely there though Review collected by and hosted on G2.com.

Escape provided addressed a gap in our Appsec program which couldn't be addressed with our current appsec tool. It integrated seemingly with our tooling and quickly secured our GraphQL endpoints. Review collected by and hosted on G2.com.

No complaints so far, I wish we would've had this sooner. Review collected by and hosted on G2.com.

It's a great application to use to help with security, IT, and easy to use. I liked the look and how easy it is to make my work easier. Review collected by and hosted on G2.com.

It does take some time to get use too. There is a steep learning curve and it took a while to learn the ropes and get comfortable using it. Review collected by and hosted on G2.com.

Firstly it solves GraphQL APIs by helping us use their graphql armour library that can be easily integrated. Secondly, after pen test, each issue provides a remediation, which are very effective. This saves time spend on web to searrch for remediaion. Customer support is very active, provides support as and when I needed. Review collected by and hosted on G2.com.

There is an issue generated at pentest for Timeout, but the rermediation is not provided in graphql armor. This timeout feature be an opportunity to complete the security provided by graphql armour lib. Review collected by and hosted on G2.com.