Halo Security Reviews & Product Details

This product offers some of the best functionality I have encountered, especially with its integrations with GCP, AWS, and a variety of other DNS and domain services. These integrations significantly enhance its ability to provide up-to-date information about domains, IP addresses, and more. In my experience, the scanning results are the most thorough among the ASMs I have tested. Review collected by and hosted on G2.com.

The UI/UX could be better, as the learning curve is quite steep. I often spend a lot of time just trying to locate the features I need. Occasionally, the interface changes significantly—usually for the better—but this means I have to relearn the logic behind where things are. Over the course of more than six months of use, I've seen the interface improved a few times, yet it still takes some effort to fully grasp how everything works. Review collected by and hosted on G2.com.

What I like best about Halo Security is its user-friendly platform that delivers lightning-fast visibility into our entire external attack surface—it's like having an attacker's playbook in reverse, spotting risks across clouds and third-parties in seconds without the hassle of manual scans. The straightforward remediation guidance and real-time alerts have saved our team countless hours, making it easier to prioritize and fix issues before they escalate. Plus, the integration with tools like Jira and Slack keeps everything seamless for our workflow. Overall, it's empowered us to stay proactive in a chaotic threat landscape. Review collected by and hosted on G2.com.

While Halo Security is a powerhouse for attack surface management, one area that could use some polishing is the depth of customization options for alert thresholds and reporting templates. Right now, the default setups work great for most teams, but for more nuanced environments—like ours with hybrid cloud setups—fine-tuning sensitivity levels or exporting reports in non-standard formats requires a few extra workarounds via API tweaks. It's not a deal-breaker (and their support jumps on it quickly when we flag it), but expanding those built-in options would make it even more of a set-it-and-forget-it tool. That said, it's still leagues ahead of legacy scanners in speed and accuracy. Review collected by and hosted on G2.com.

I find Halo Security incredibly valuable because it offers a comprehensive package crucial for attack surface scanning, which is a priority for us. It's very mature in handling these tasks. I appreciate how it integrates seamlessly into our existing security ecosystem, making it highly adaptable. The team behind Halo Security has notable technical expertise, assisting with setup and mitigating issues related to unfamiliar terminology. Their guidance has been instrumental in a smooth deployment. The service excels at identifying problems we were unaware of, such as vulnerabilities in header security policies and leaked credentials like API keys in our frontend code. This kind of insight is invaluable, enhancing our ability to maintain robust security. Furthermore, Halo Security proved more feature-complete compared to other tools we evaluated like Secyour, Probely and Detectify, especially in attack surface scanning, which is the most useful feature for us. The pricing is also fair, making it a good deal for startups, which is why I would highly recommend it to businesses in a similar situation. Review collected by and hosted on G2.com.

I find that the attack surface scanning takes a lot of time. I would prefer it to be faster as it seems that the resources are limited, even though I understand it is reasonably priced. Nonetheless, improving the speed of the scanning process would enhance my experience. Review collected by and hosted on G2.com.

The organization of the dashboard is very helpful for reviewing all of the company's exposure. Additionally, the web application scan module provides a high level of detail. The ability to use the alerting system for a SOC is also a crucial feature for our customers. Review collected by and hosted on G2.com.

The Lack of a proper compliance module for the european market Review collected by and hosted on G2.com.

The product functions effectively and provides a comprehensive overview of your External Attack Surface. It features real-time monitoring with continuous updates, and alerts can be configured to enable a proactive approach to managing identified risks.

In addition to discovering external-facing access points, the product is capable of performing web application testing using automated tools or through penetration testing services. There is also an option to purchase a module for CTI. Review collected by and hosted on G2.com.

Even after the update, I still think the area that needs the most improvement is the user interface, particularly in how the menus are organized and displayed. Review collected by and hosted on G2.com.

I appreciate the actionable insights that Halo Security offers. Instead of simply listing vulnerabilities, it helps you identify which ones are most critical, allowing you to prioritize your efforts where they will have the greatest impact. Review collected by and hosted on G2.com.

The high cost makes it less accessible for smaller companies. Review collected by and hosted on G2.com.

Good portal navigation, single pane of glass for multiple services, very efficient support, effective PCI ASV scanning & pen testing. Review collected by and hosted on G2.com.

I have nothing negative to say about HALO. Review collected by and hosted on G2.com.

Their customizability and support are up to the mark. Review collected by and hosted on G2.com.

Sometimes it can be difficult to navigate within the portal. Review collected by and hosted on G2.com.

The dashboard is quite good — it provides a clear overview of the overall security posture and makes it easy to monitor scan results at a glance. Review collected by and hosted on G2.com.

The API is not very user-friendly. Setting up multiple scan targets requires too many steps and could be more efficient. Review collected by and hosted on G2.com.

The interface is very nice, and the dashboards are excellent for the end customers of a service provider. The tool is easy to use. Review collected by and hosted on G2.com.

I don’t like the new look of the console where the various dashboards have become reports and are not comfortable to navigate. Review collected by and hosted on G2.com.