# Best Penetration Testing Tools

## How Many Penetration Testing Tools Products Does G2 Track?

**Total Products under this Category:** 136

### Category Stats (Aug 2026)

- **Average Rating:** 4.64/5 The average rating of products in this category, based on all submitted ratings
- **Top Trending Product:** Cyver Core (+1.26%) - Among all products in this category, Cyver Core recorded the largest rating increase compared to last month

_Last updated: August 05, 2026_

## How Does G2 Rank Penetration Testing Tools Products?

**Why You Can Trust G2's Software Rankings:**

- 30 Analysts and Data Experts
- 3,600+ Authentic Reviews
- 136+ Products
- Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

## G2 Grid® for Penetration Testing Tools
 ![G2 Grid® for Penetration Testing Tools plotting products by satisfaction and market presence](https://www.g2.com/categories/penetration-testing-tools/grids.png?focus%5B%5D=55515&focus%5B%5D=168853&focus%5B%5D=154599&focus%5B%5D=1333324&focus%5B%5D=1282377&focus%5B%5D=54142&focus%5B%5D=99367&focus%5B%5D=39589)

Highlighted products: Cobalt, vPenTest, Astra Pentest, Oneleet, NodeZero from Horizon3.ai, Bugcrowd, Verizon Penetration Testing, and H1 Platform.

Underlying data: [Grid® JSON](https://www.g2.com/categories/penetration-testing-tools/grids.json?focus%5B%5D=cobalt-io-cobalt&focus%5B%5D=vpentest&focus%5B%5D=astra-pentest&focus%5B%5D=oneleet&focus%5B%5D=nodezero-from-horizon3-ai&focus%5B%5D=bugcrowd&focus%5B%5D=verizon-penetration-testing&focus%5B%5D=h1-platform)

**Sponsored**

### Cyver Core

Cyver Core is a pentest collaboration and management platform to digitize, automate, and optimize manual work for pentest firms, while enabling Pentest-as-a-Service delivery. Cyver Core offers pentest report automation, branded client portals, pentest management, team management, and more.

[Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list_llm&secure%5Bcategory_id%5D=1519&secure%5Bchosen_at%5D=2026-08-10T01%3A12%3A43Z&secure%5Bdisplayable_resource_id%5D=1519&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=page_category&secure%5Bplacement_resource_ids%5D%5B%5D=1519&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=143763&secure%5Bresource_id%5D=1519&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fpenetration-testing-tools&secure%5Btoken%5D=4dc66d3f4963fb0a36760733abc7d3858fe478d8be19709ff0968107c54a89cc&secure%5Burl%5D=https%3A%2F%2Fcore.cyver.io%2F&secure%5Burl_type%5D=company_website)

### [Cobalt](https://www.g2.com/products/cobalt-io-cobalt/reviews)

Cobalt is the pioneer in pentesting as a service (PTaaS) and a leader in continuous offensive security testing grounded in human expertise. The Cobalt Offensive Security Platform spans the full spectrum of offensive security, from targeted, human-led pentesting to high-frequency, AI-driven autonomous security testing. Only Cobalt brings together the four critical elements of modern offensive security: elite human expertise, a context-aware platform, AI-powered orchestration, and the industry's largest dataset of real-world pentest results. Thousands of customers and hundreds of partners rely on Cobalt and its global network of 500+ vetted security experts to continuously identify, prioritize, and remediate exploitable risk with the speed, flexibility, and precision today's organizations require.

**Average Rating:** 4.5/5.0

**Total Reviews:** 179

#### How Do G2 Users Rate Cobalt?

- **Has the product been a good partner in doing business?:** 9.3/10 (Category avg: 9.4/10)
- **Performance and Reliability:** 9.1/10 (Category avg: 9.2/10)
- **Vulnerability Scan:** 8.7/10 (Category avg: 9.1/10)
- **Extensibility:** 8.5/10 (Category avg: 8.7/10)

#### Who Is the Company Behind Cobalt?

- **Seller:** [Cobalt](https://www.g2.com/sellers/cobalt-33275b9c-c870-4949-8fd5-a68eb12f96bb)
- **Company Website:** cobalt.io
- **Year Founded:** 2013
- **HQ Location:** San Francisco, California
- **Twitter:** @cobalt\_io  
8,462 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=ed9f585b23d4060fb4049f4e12e0029f88ad6480cba48b930678edf3b5b77c33&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fcobalt_io%2F&secure%5Burl_type%5D=linkedin_company_website)  
557 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** Security Engineer, CTO
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 52% Medium, 23% Small

#### What Do G2 Reviewers Say About Cobalt?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **pentesting efficiency** of Cobalt due to its seamless process and prompt report generation.
- Users commend Cobalt for its **exceptional customer support** , providing expertise and assistance throughout the pentesting process.
- Users value the **ease of use** of Cobalt, praising its seamless setup and quick reporting for pentests.
- Users value the **constant communication** during the process, enhancing collaboration and transparency throughout their experience with Cobalt.
- Users value the **immediate and comprehensive reports** from Cobalt, simplifying pentesting and ensuring compliance.

##### Cons

- Users find Cobalt to be **expensive** , particularly for small organizations and due to costly credit requirements.
- Users find the **limited scope** of Cobalt's functionality inadequate, lacking depth in testing and real-world application coverage.
- Users find the **lack of detail** in instructions frustrating, as it complicates the setup process for tests.
- Users find Cobalt's **pricing model confusing** , suggesting revisions for clarity and integration costs.
- Users experience **inaccuracy in audits** with Cobalt, leading to confusion and inefficient resource allocation in security assessments.

#### What Are Recent G2 Reviews of Cobalt?

**["Simple, Fast, Flexible and Reliable Security Testing with Cobalt"](https://www.g2.com/survey_responses/cobalt-review-12516150)**

**Rating:** 5.0/5.0 stars

_— Shivendu T._

[Read full review](https://www.g2.com/survey_responses/cobalt-review-12516150)

**["Collaborative, Real-World Pentesting with Actionable Findings"](https://www.g2.com/survey_responses/cobalt-review-12683090)**

**Rating:** 5.0/5.0 stars

_— Arpit G._

[Read full review](https://www.g2.com/survey_responses/cobalt-review-12683090)

#### What Are G2 Users Discussing About Cobalt?

- [How do you use Cobalt?](https://www.g2.com/discussions/how-do-you-use-cobalt)
- [What is cobalt database?](https://www.g2.com/discussions/what-is-cobalt-database)
- [What is a cobalt developer?](https://www.g2.com/discussions/what-is-a-cobalt-developer)
- [Is cobalt an operating system?](https://www.g2.com/discussions/is-cobalt-an-operating-system)

### [vPenTest](https://www.g2.com/pt/products/vpentest/reviews)

A Vonahi Security está construindo o futuro da cibersegurança ofensiva ao oferecer testes de penetração automatizados e de alta qualidade através de sua plataforma SaaS, vPenTest. Projetado para replicar as ferramentas, técnicas e metodologias de consultores experientes, o vPenTest traz os benefícios dos testes de penetração de rede manuais para uma solução automatizada e fácil de usar. Tradicionalmente, os testes de penetração têm sido um processo manual, demorado e caro que muitas organizações realizam apenas uma ou duas vezes por ano. Isso frequentemente deixa as empresas expostas a ameaças emergentes entre as avaliações. O vPenTest aborda essa lacuna ao oferecer testes rápidos, consistentes e sob demanda que ajudam as organizações a avaliar seu risco de cibersegurança em tempo real de forma mais eficaz. Impulsionado por uma estrutura proprietária que evolui através de pesquisa contínua e insights do mundo real, o vPenTest permanece alinhado com as últimas técnicas de ataque e melhores práticas da indústria. A plataforma é apoiada por mais de 13 anos de experiência em segurança ofensiva, com a equipe possuindo certificações como CISSP, OSCP, OSCE, CEH, entre outras. Seu conhecimento está incorporado diretamente na plataforma, garantindo que cada teste seja conduzido com profundidade, consistência e precisão—sem os atrasos ou variabilidade dos testes manuais. O vPenTest permite que as organizações realizem testes de penetração de rede internos e externos com a frequência necessária, seja mensalmente, trimestralmente ou antes de auditorias ou revisões de seguros. Os relatórios automatizados fornecem insights acionáveis que facilitam a priorização da remediação e demonstram progresso em direção à conformidade. Hoje, mais de 22.000 organizações confiam no vPenTest para fortalecer sua postura de segurança e reduzir riscos. Isso inclui provedores de serviços gerenciados, provedores de serviços de segurança gerenciados, instituições financeiras, organizações orientadas por conformidade e equipes internas de TI. Quer você esteja trabalhando para atender a requisitos regulatórios, garantir cobertura de seguro cibernético ou defender-se proativamente contra ameaças em evolução, o vPenTest torna os testes de penetração de rede fáceis, acessíveis e escaláveis.

**Average Rating:** 4.6/5.0

**Total Reviews:** 243

#### How Do G2 Users Rate vPenTest?

- **the product tem sido um bom parceiro comercial?:** 9.4/10 (Category avg: 9.4/10)
- **Desempenho e Confiabilidade:** 9.1/10 (Category avg: 9.2/10)
- **Varredura de vulnerabilidade:** 9.0/10 (Category avg: 9.1/10)
- **Extensibilidade:** 8.5/10 (Category avg: 8.7/10)

#### Who Is the Company Behind vPenTest?

- **Vendedor:** [Kaseya](https://www.g2.com/pt/sellers/kaseya)
- **Website da Empresa:** www.kaseya.com
- **Ano de Fundação:** 2000
- **Localização da Sede:** Miami, FL
- **Twitter:** @KaseyaCorp  
17,411 seguidores no Twitter
- **Página do LinkedIn®:** [www.linkedin.com](https://www.g2.com/pt/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=6c9a31f82a811b1e3cc7be6babe8882bb8f6b2927e142d98dd6f5662a0d0e4d2&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fkaseya%2F&secure%5Burl_type%5D=linkedin_company_website)  
5,471 funcionários no LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CEO
- **Top Industries:** Tecnologia da Informação e Serviços, Segurança de Redes e Computadores
- **Company Size:** 69% Small, 24% Medium

#### What Do G2 Reviewers Say About vPenTest?

_AI-generated summary from verified user reviews_

##### Pros

- Os usuários acham o vPenTest **excepcionalmente fácil de usar** , aumentando a eficiência e tornando os testes de penetração acessíveis para iniciantes.
- Os usuários apreciam os **relatórios técnicos incríveis** da vPenTest, que fornecem etapas detalhadas de remediação e são revisados pela CREST.
- Os usuários valorizam a **interface amigável** do vPenTest, melhorando a navegação e aumentando significativamente a eficiência dos testes de penetração.
- Os usuários destacam a **facilidade de configuração** do vPenTest, apreciando sua implementação direta e interface amigável.
- Os usuários valorizam a **facilidade de implementação** do vPenTest, desfrutando de uma configuração sem complicações e integração sem esforço no fluxo de trabalho.

##### Cons

- Os usuários acham o **processo de configuração complexo** , exigindo várias tentativas e sem integração com os sistemas existentes.
- Os usuários estão frustrados com o **escopo limitado** do vPenTest, pois ele não consegue atender a todas as necessidades de pentesting de forma eficaz.
- Os usuários acham o vPenTest **caro** , especialmente devido aos modelos de preços que sobrecarregam organizações menores e contratos com clientes maiores.
- Os usuários observam a **relato inadequado** no vPenTest, destacando problemas com a padronização e disponibilidade limitada de relatórios.
- Os usuários observam a **falta de detalhes** no vPenTest, o que pode levar a confusão e exigir explicações adicionais.

#### What Are Recent G2 Reviews of vPenTest?

**["Baselines de Testes de Penetração Rápidos e Acionáveis com Relatórios Claros e Prontos para o Cliente"](https://www.g2.com/pt/survey_responses/vpentest-review-12881608)**

**Rating:** 4.5/5.0 stars

_— Darren ._

[Read full review](https://www.g2.com/pt/survey_responses/vpentest-review-12881608)

**["Ótimo produto, fácil de usar, faz exatamente como descrito."](https://www.g2.com/pt/survey_responses/vpentest-review-9009510)**

**Rating:** 5.0/5.0 stars

_— Kamran H._

[Read full review](https://www.g2.com/pt/survey_responses/vpentest-review-9009510)

### [Astra Pentest](https://www.g2.com/products/astra-pentest/reviews)

Astra Security is a leading continuous penetration testing platform that combines AI-powered autonomous pentesting with certified expert-led assessments. Powered by Attack AI, trained on 6.8M+ security findings and insights from 5,000+ real-world pentests. Astra deploys intelligent agents that continuously discover, validate, prioritize, and help remediate vulnerabilities at scale. While AI handles speed and scale, Astra’s certified security experts focus on what automation alone cannot: complex business logic flaws, multi-step attack chains, advanced exploit paths, and emerging AI/LLM-specific threats. Built for modern engineering teams, Astra integrates directly into CI/CD workflows, enabling continuous security validation between releases instead of relying on outdated annual pentests. The platform delivers comprehensive Autonomous Pentest powered by AI agents, DAST vulnerability scanner and human-driven pentests across web apps, AI/LLMs, mobile apps, APIs, cloud infrastructure. Astra is CREST-accredited, CERT-IN empaneled, and a PCI ASV-certified vendor. Our team also led the development of the OWASP APTS framework, helping shape the industry standard for continuous security testing. Today, 1,500+ organizations across 70+ countries trust Astra Security, including Ford, Loom, CompTIA, Hitachi, HackerRank, and OLX.

**Average Rating:** 4.6/5.0

**Total Reviews:** 222

#### How Do G2 Users Rate Astra Pentest?

- **Has the product been a good partner in doing business?:** 9.3/10 (Category avg: 9.4/10)
- **Performance and Reliability:** 9.0/10 (Category avg: 9.2/10)
- **Vulnerability Scan:** 9.0/10 (Category avg: 9.1/10)
- **Extensibility:** 8.1/10 (Category avg: 8.7/10)

#### Who Is the Company Behind Astra Pentest?

- **Seller:** [ASTRA IT, Inc.](https://www.g2.com/sellers/astra-it-inc)
- **Company Website:** www.getastra.com
- **Year Founded:** 2018
- **HQ Location:** New Delhi, IN
- **Twitter:** @getastra  
694 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=fbe109060085ad9c09016ddbb00bd4f363004bed188f1fd0e5a11ea004d08c89&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fgetastra%2F&secure%5Burl_type%5D=linkedin_company_website)  
130 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CTO, CEO
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 67% Small, 28% Medium

#### What Do G2 Reviewers Say About Astra Pentest?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **responsive customer support** of Astra Pentest, enhancing their experience and ensuring smooth collaboration.
- Users value the **comprehensive vulnerability management features** of Astra Pentest, enhancing their ability to address security issues effectively.
- Users love the **ease of use** of Astra Pentest, appreciating its intuitive design and accessible features.
- Users commend Astra Pentest for its **efficient penetration testing** , enabling swift execution and effective communication throughout the process.
- Users value the **thorough vulnerability identification** of Astra Pentest, enhancing confidence and security in their development processes.

##### Cons

- Users experience **poor customer support** , citing slow responses and difficulties with account setup and vulnerability inquiries.
- Users find the **poor interface design** of Astra Pentest to be clunky and not user-friendly, affecting usability.
- Users experience **slow performance** with Astra Pentest, affecting testing speed and response times for results.
- Users feel that the **UX could be improved** for a smoother experience, as navigation can sometimes be confusing.
- Users face a **lack of information** with Astra Pentest, as documentation and updates are often insufficient or slow to arrive.

#### What Are Recent G2 Reviews of Astra Pentest?

**["Smooth Onboarding, Responsive Support, and Strong Pentest Lifecycle Controls"](https://www.g2.com/survey_responses/astra-pentest-review-13001206)**

**Rating:** 5.0/5.0 stars

_— Sivakumar S._

[Read full review](https://www.g2.com/survey_responses/astra-pentest-review-13001206)

**["Exceptional VAPT Solution with Prompt Support"](https://www.g2.com/survey_responses/astra-pentest-review-9603864)**

**Rating:** 5.0/5.0 stars

_— Nikhil Ajit S._

[Read full review](https://www.g2.com/survey_responses/astra-pentest-review-9603864)

#### What Are G2 Users Discussing About Astra Pentest?

- [What is Astra Pentest used for?](https://www.g2.com/discussions/what-is-astra-pentest-used-for) - 2 comments

### [Oneleet](https://www.g2.com/products/oneleet/reviews)

Oneleet is the all-in-one security and compliance platform that gets companies genuinely secure while achieving SOC 2, ISO 27001, HIPAA and other compliance certifications faster than traditional approaches. Unlike compliance platforms that focus on checkbox evidence collection, Oneleet implements real security first. Compliance follows automatically as a natural outcome of effective cybersecurity, not as a separate goal. Most companies face a false choice: painful but effective security, or painless but ineffective compliance theater. Traditional compliance platforms require juggling multiple vendors, managing fragmented tools, spending months with consultants, and doing manual evidence collection to achieve a certificate that doesn't actually make you secure. Oneleet consolidates what previously required half a dozen vendors into one integrated platform: penetration testing by real security experts (not just vulnerability scans), code scanning with SAST and DAST, cloud security posture management, attack surface monitoring, mobile device management, security training and awareness, policy generation and management, and continuous compliance monitoring. Because we build everything ourselves and control the entire stack, we deploy comprehensive security with a click. No blind spots. No integration gaps. No vendor sprawl. We guarantee audit outcomes because our standards are higher than auditors' standards. We use AI extensively but responsibly, automating threat modeling and risk assessments while keeping humans in the loop to ensure quality. Clients never see AI hallucinations. We take full responsibility for the entire security journey, from initial setup through audit completion and continuous monitoring. Companies achieve compliance readiness faster with Oneleet, not by doing less, but by making real security easier. We ship all the tools you would normally spend weeks or months setting up and adopting. Our customers regularly win deals they previously lost due to inadequate security postures. Oneleet is the fastest growing compliance company in the sector. A large number of Oneleet's newer clients come from platforms like Vanta and Drata. With Oneleet's all-in-one bundle pricing its ROI is significantly higher than that of Vanta, Drata and Delve. Companies that switch from Vanta, Drata, or Delve to Oneleet report faster audits, higher approval rates, and less manual effort. Vanta and Drata rely heavily on manual evidence collection and vendor integrations, creating delays and gaps. Delve emphasizes AI automation but often sacrifices accuracy—its generated outputs are frequently rejected or require manual fixes. Oneleet achieves both precision and speed by combining full-stack automation with expert oversight, producing the industry’s lowest audit-rejection rate and the fastest path to verified security. Oneleet serves SMBs and growth-stage companies that need compliance certifications to close enterprise deals, but want to be genuinely secure, not just certified on paper. Founded by professional penetration testers who spent over a decade breaching Fortune 500s and startups, we built Oneleet to end the disconnect between compliance and security.

**Average Rating:** 4.9/5.0

**Total Reviews:** 139

#### How Do G2 Users Rate Oneleet?

- **Performance and Reliability:** 10.0/10 (Category avg: 9.2/10)
- **Vulnerability Scan:** 10.0/10 (Category avg: 9.1/10)
- **Extensibility:** 10.0/10 (Category avg: 8.7/10)

#### Who Is the Company Behind Oneleet?

- **Seller:** [Oneleet](https://www.g2.com/sellers/oneleet)
- **Company Website:** www.oneleet.com
- **Year Founded:** 2022
- **HQ Location:** Atlanta, US
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=608cddbd385fe39fde4c563bc380996eeaca0492b488a338189685df9b913c24&secure%5Burl%5D=http%3A%2F%2Fwww.linkedin.com%2Fcompany%2Foneleet&secure%5Burl_type%5D=linkedin_company_website)  
40 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** Engineer
- **Top Industries:** Computer Software, Medical Devices
- **Company Size:** 15% Small, 11% Medium

#### What Do G2 Reviewers Say About Oneleet?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **continuous security monitoring** of Oneleet, transforming compliance into a seamless and efficient process.
- Users value the **automated compliance monitoring** of Oneleet, making ISO 27001 and SOC2 documentation management seamless.
- Users find Oneleet's platform to have **exceptional ease of use** , simplifying compliance and providing clear support throughout.
- Users value the **quick and expert responses** from Oneleet, feeling supported like having a senior colleague available.
- Users value the **facilitated compliance management** of Oneleet, which streamlines document handling and automates evidence collection.

##### Cons

- Users face **integration issues** with Oneleet, limiting connections and requiring support from engineers for resolution.
- Users are disappointed by the **limited customization** , as policies are restricted to only English with no multilingual support.
- Users express frustration over **limited integrations** that hinder the platform's compatibility with preferred connections.
- Users note a **lack of integration** with smaller platforms, limiting overall functionality and usability of Oneleet.
- Users are disappointed by the **lack of language customization** , limiting accessibility and usability for non-English speakers.

#### What Are Recent G2 Reviews of Oneleet?

**["Oneleet made SOC 2 practical, not painful"](https://www.g2.com/survey_responses/oneleet-review-12855748)**

**Rating:** 4.5/5.0 stars

[Read full review](https://www.g2.com/survey_responses/oneleet-review-12855748)

**["Oneleet's Speed and AI Automation Exceeded Expectations"](https://www.g2.com/survey_responses/oneleet-review-11879146)**

**Rating:** 5.0/5.0 stars

_— Antoine D._

[Read full review](https://www.g2.com/survey_responses/oneleet-review-11879146)

### [NodeZero from Horizon3.ai](https://www.g2.com/pt/products/nodezero-from-horizon3-ai/reviews)

A plataforma NodeZero® da Horizon3.ai capacita sua organização a encontrar, corrigir e verificar continuamente sua superfície de ataque explorável. Reduza seu risco de segurança encontrando autonomamente fraquezas em sua rede, sabendo como priorizá-las e corrigi-las, e verificando imediatamente se suas correções funcionam. O NodeZero oferece testes de penetração autônomos seguros para produção e outras operações de avaliação chave que se expandem por seus maiores ambientes internos, externos, em nuvem e nuvem híbrida. Sem agentes necessários, sem código para escrever e sem consultores para contratar.

**Average Rating:** 4.7/5.0

**Total Reviews:** 35

#### How Do G2 Users Rate NodeZero from Horizon3.ai?

- **the product tem sido um bom parceiro comercial?:** 9.6/10 (Category avg: 9.4/10)
- **Desempenho e Confiabilidade:** 9.5/10 (Category avg: 9.2/10)
- **Varredura de vulnerabilidade:** 9.6/10 (Category avg: 9.1/10)
- **Extensibilidade:** 9.8/10 (Category avg: 8.7/10)

#### Who Is the Company Behind NodeZero from Horizon3.ai?

- **Vendedor:** [Horizon3.ai](https://www.g2.com/pt/sellers/horizon3-ai)
- **Website da Empresa:** www.horizon3.ai
- **Ano de Fundação:** 2019
- **Localização da Sede:** San Francisco, US
- **Twitter:** @Horizon3ai  
2,802 seguidores no Twitter
- **Página do LinkedIn®:** [linkedin.com](https://www.g2.com/pt/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=b96ec867662918611a5419cf5256bf5c03ca287b91e15731019e597bd28f51b6&secure%5Burl%5D=https%3A%2F%2Flinkedin.com%2Fcompany%2Fhorizon3ai%2F&secure%5Burl_type%5D=linkedin_company_website)  
444 funcionários no LinkedIn®

#### Who Uses This Product?

- **Company Size:** 54% Medium, 20% Large

#### What Do G2 Reviewers Say About NodeZero from Horizon3.ai?

_AI-generated summary from verified user reviews_

##### Pros

- Os usuários valorizam a **comunicação intuitiva** do NodeZero, tornando-o acessível tanto para a equipe técnica quanto para a não técnica.
- Os usuários elogiam a **integração intuitiva e completa** do NodeZero, tornando-o essencial para as necessidades de cibersegurança.
- Os usuários valorizam a **facilidade de implementação** do NodeZero, achando-o intuitivo e acessível para todos os membros da equipe.
- Os usuários valorizam as **integrações fáceis** do NodeZero, tornando-o acessível tanto para a equipe técnica quanto para a não técnica.
- Os usuários valorizam a **eficiência** do NodeZero em identificar rapidamente configurações incorretas e vulnerabilidades de longa data em seus ambientes.

##### Cons

- Os usuários acham a **relato inadequado** dos estados de sucesso e falha das máquinas da Tripwires frustrante e pouco claro.
- Os usuários observam uma **falta de detalhes** nos relatórios do Tripwire, tornando difícil identificar resultados específicos das máquinas.

#### What Are Recent G2 Reviews of NodeZero from Horizon3.ai?

**["Mostrando o que é realmente explorável!"](https://www.g2.com/pt/survey_responses/nodezero-from-horizon3-ai-review-13121791)**

**Rating:** 5.0/5.0 stars

_— james.kavanagh@cybervigilance.uk K._

[Read full review](https://www.g2.com/pt/survey_responses/nodezero-from-horizon3-ai-review-13121791)

**["Suporte Relâmpago e Runners Hospedados Flexíveis"](https://www.g2.com/pt/survey_responses/nodezero-from-horizon3-ai-review-13221122)**

**Rating:** 5.0/5.0 stars

_— William M._

[Read full review](https://www.g2.com/pt/survey_responses/nodezero-from-horizon3-ai-review-13221122)

### [Bugcrowd](https://www.g2.com/pt/products/bugcrowd/reviews)

A Bugcrowd liberta organizações com baixa tolerância ao risco de escassez crônica de talentos, ferramentas barulhentas que geram falsos positivos e o medo de vulnerabilidades críticas ocultas ou emergentes. Nossa plataforma SaaS oferece acesso à capacidade ilimitada e às habilidades da comunidade global de hackers éticos/pentestadores para uma redução de risco mais profunda e proativa e uma conformidade regulatória mais rápida. Com mais de 12 anos de experiência e mais de 1200 clientes em todos os setores (incluindo OpenAI, National Australia Bank, Indeed, USAA, Twilio e CISA), sabemos como é a segurança de longo prazo com crowdsourcing.

**Average Rating:** 4.3/5.0

**Total Reviews:** 60

#### How Do G2 Users Rate Bugcrowd?

- **the product tem sido um bom parceiro comercial?:** 9.4/10 (Category avg: 9.4/10)
- **Desempenho e Confiabilidade:** 8.5/10 (Category avg: 9.2/10)
- **Varredura de vulnerabilidade:** 8.3/10 (Category avg: 9.1/10)
- **Extensibilidade:** 8.2/10 (Category avg: 8.7/10)

#### Who Is the Company Behind Bugcrowd?

- **Vendedor:** [Bugcrowd](https://www.g2.com/pt/sellers/bugcrowd)
- **Ano de Fundação:** 2012
- **Localização da Sede:** San Francisco, CA
- **Twitter:** @Bugcrowd  
199,211 seguidores no Twitter
- **Página do LinkedIn®:** [www.linkedin.com](https://www.g2.com/pt/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=333aa242026c6a6270d8f7652054439cb3c591cdb724d0ffb00a0108b2f6b966&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fbugcrowd%2F&secure%5Burl_type%5D=linkedin_company_website)  
3,701 funcionários no LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Tecnologia da Informação e Serviços, Segurança de Redes e Computadores
- **Company Size:** 34% Large, 33% Small

#### What Do G2 Reviewers Say About Bugcrowd?

_AI-generated summary from verified user reviews_

##### Pros

- Os usuários valorizam a **alta qualidade dos relatórios** no Bugcrowd, apreciando relatórios detalhados e processos de submissão organizados para uma descoberta eficaz de vulnerabilidades.
- Os usuários acham o Bugcrowd **fácil de usar** , com uma configuração perfeita e uma interface intuitiva que melhora sua experiência.
- Os usuários elogiam o **excelente suporte ao cliente** da Bugcrowd, destacando sua capacidade de resposta e genuína utilidade ao longo de sua experiência.
- Os usuários valorizam a **comunicação consistente e transparente** da Bugcrowd, melhorando a experiência geral de pesquisa.
- Os usuários valorizam o Bugcrowd por sua **detecção eficiente de vulnerabilidades** através de uma comunidade habilidosa, melhorando a segurança e economizando tempo.

##### Cons

- Os usuários expressam frustração com o **pobre suporte ao cliente** , destacando problemas com atrasos no triagem e processos de relatório não responsivos.
- Os usuários frequentemente experimentam **desempenho lento** na triagem e validação de relatórios, afetando seu engajamento e satisfação com o Bugcrowd.
- Os usuários enfrentam **tempos de resposta lentos e triagem inconsistente** das empresas, impactando sua experiência geral com a Bugcrowd.
- Os usuários experimentam **relatórios inadequados** , enfrentando atrasos e validação lenta que podem impedir resoluções oportunas e frustrar os pesquisadores.
- Os usuários acham a **curva de aprendizado íngreme** no Bugcrowd, tornando desafiador para iniciantes navegar na plataforma.

#### What Are Recent G2 Reviews of Bugcrowd?

**["Bugcrowd oferece soluções de segurança de primeira linha para uma gestão robusta de vulnerabilidades."](https://www.g2.com/pt/survey_responses/bugcrowd-review-8940044)**

**Rating:** 5.0/5.0 stars

_— Usuário Verificado em Tecnologia da Informação e Serviços_

[Read full review](https://www.g2.com/pt/survey_responses/bugcrowd-review-8940044)

**["Capacita a Gestão de Vulnerabilidades com a Comunidade de Especialistas"](https://www.g2.com/pt/survey_responses/bugcrowd-review-12088640)**

**Rating:** 4.0/5.0 stars

_— Mariam A._

[Read full review](https://www.g2.com/pt/survey_responses/bugcrowd-review-12088640)

### [Verizon Penetration Testing](https://www.g2.com/products/verizon-penetration-testing/reviews)

Penetration testing is an important part of managing risk. It helps you probe for cyber vulnerabilities so you can put resources where theyre needed most. Assess your risks and measure the dangers, then use real-world scenarios to help you strengthen your security.

**Average Rating:** 4.6/5.0

**Total Reviews:** 15

#### How Do G2 Users Rate Verizon Penetration Testing?

- **Has the product been a good partner in doing business?:** 9.4/10 (Category avg: 9.4/10)
- **Performance and Reliability:** 9.4/10 (Category avg: 9.2/10)
- **Vulnerability Scan:** 9.4/10 (Category avg: 9.1/10)
- **Extensibility:** 8.3/10 (Category avg: 8.7/10)

#### Who Is the Company Behind Verizon Penetration Testing?

- **Seller:** [Verizon Enterprise](https://www.g2.com/sellers/verizon-enterprise)
- **Year Founded:** 1988
- **HQ Location:** Basking Ridge, NJ
- **Twitter:** @VerizonEnterpr  
7 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=32c2ef4b0503c1e083833676e491ac42edef7577ccd78938f7f25da81fadf7f8&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F1094%2F&secure%5Burl_type%5D=linkedin_company_website)  
15,489 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Computer & Network Security, Information Technology and Services
- **Company Size:** 58% Small, 21% Medium

#### What Are Recent G2 Reviews of Verizon Penetration Testing?

**["review about verizon penetration testing"](https://www.g2.com/survey_responses/verizon-penetration-testing-review-6551460)**

**Rating:** 5.0/5.0 stars

_— Verified User in Computer & Network Security_

[Read full review](https://www.g2.com/survey_responses/verizon-penetration-testing-review-6551460)

**["Correct pentesting tool for enterprise"](https://www.g2.com/survey_responses/verizon-penetration-testing-review-5299305)**

**Rating:** 4.5/5.0 stars

_— DHARMENDRA V._

[Read full review](https://www.g2.com/survey_responses/verizon-penetration-testing-review-5299305)

#### What Are G2 Users Discussing About Verizon Penetration Testing?

- [What is Verizon Penetration Testing used for?](https://www.g2.com/discussions/what-is-verizon-penetration-testing-used-for) - 1 comment, 1 upvote

### [H1 Platform](https://www.g2.com/products/h1-platform/reviews)

HackerOne is a global leader in Continuous Threat Exposure Management (CTEM) and the only solution provider that pairs the simultaneous trust of the Fortune 500 and the world's largest community of security researchers to secure the AI-native enterprise. The H1 Platform unites agentic AI solutions with security researchers ingenuity to continuously discover, validate, prioritize, and remediate exposures across code, cloud, and AI systems. Through solutions like bug bounty, vulnerability disclosure, agentic pentesting, AI red teaming, and code security, HackerOne delivers measurable, continuous reduction of cyber risk for enterprises. Industry leaders, including Anthropic, Crypto.com, General Motors, Goldman Sachs, Lufthansa, Uber, UK Ministry of Defence, and the U.S. Department of Defense, trust HackerOne to safeguard their digital ecosystems. HackerOne was recognized in Gartner’s Emerging Tech Impact Radar: AI Cybersecurity Ecosystem report for its leadership in AI Security Testing.

**Average Rating:** 4.5/5.0

**Total Reviews:** 74

#### How Do G2 Users Rate H1 Platform?

- **Has the product been a good partner in doing business?:** 9.0/10 (Category avg: 9.4/10)
- **Performance and Reliability:** 9.0/10 (Category avg: 9.2/10)
- **Vulnerability Scan:** 10.0/10 (Category avg: 9.1/10)
- **Extensibility:** 10.0/10 (Category avg: 8.7/10)

#### Who Is the Company Behind H1 Platform?

- **Seller:** [HackerOne](https://www.g2.com/sellers/hackerone)
- **Company Website:** hackerone.com
- **Year Founded:** 2012
- **HQ Location:** San Francisco, California
- **Twitter:** @Hacker0x01  
337,493 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=66564701ea46682e07fb494dc3da56457fbf656178a90fc0665fd15f314bdc5d&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fhackerone%2F&secure%5Burl_type%5D=linkedin_company_website)  
7,090 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Information Technology and Services, Computer & Network Security
- **Company Size:** 42% Large, 42% Medium

#### What Do G2 Reviewers Say About H1 Platform?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **ease of use** of HackerOne, enabling quick onboarding and seamless program management.
- Users value the **streamlined interface** of H1 Platform, facilitating efficient bug management and collaboration with ethical hackers.
- Users value the **collaboration with skilled ethical hackers** , enhancing security and improving vulnerability management effectively.
- Users value the **strong security protection** offered by HackerOne, enhancing overall safety through expert vulnerability management.
- Users value the **responsive customer support** of H1 Platform, consistently providing guidance and assistance when needed.

##### Cons

- Users experience **complexity issues** with triage workflows and credentials management, affecting overall efficiency and satisfaction.
- Users note the **expensive pricing** of the H1 Platform, which can strain budgets despite its valuable features.
- Users find **time management challenging** on H1 Platform due to inconsistent triage speeds and complexities in report handling.
- Users report **poor customer support** with slow response times and unresolved tickets affecting their overall experience.
- Users find the **poor interface design** confusing and difficult to navigate, impacting their overall experience.

#### What Are Recent G2 Reviews of H1 Platform?

**["Straightforward, Practical Vulnerability Management with Clear Visibility"](https://www.g2.com/survey_responses/h1-platform-review-12788653)**

**Rating:** 5.0/5.0 stars

_— Verified User in Automotive_

[Read full review](https://www.g2.com/survey_responses/h1-platform-review-12788653)

**["Powerful Bug Bounty Platform with Room for Improvements"](https://www.g2.com/survey_responses/h1-platform-review-12784912)**

**Rating:** 4.5/5.0 stars

_— Mikhail Y._

[Read full review](https://www.g2.com/survey_responses/h1-platform-review-12784912)

#### What Are G2 Users Discussing About H1 Platform?

- [How many hackers are there in HackerOne?](https://www.g2.com/discussions/how-many-hackers-are-there-in-hackerone) - 2 comments, 1 upvote
- [What is managed program in HackerOne?](https://www.g2.com/discussions/what-is-managed-program-in-hackerone)
- [How many programs are managed by HackerOne?](https://www.g2.com/discussions/how-many-programs-are-managed-by-hackerone)
- [What is the use of HackerOne?](https://www.g2.com/discussions/what-is-the-use-of-hackerone)

### [Pentera](https://www.g2.com/pt/products/pentera/reviews)

A Pentera é a líder de categoria em Validação de Segurança Automatizada, permitindo que qualquer organização teste com facilidade a integridade de todas as camadas de cibersegurança, revelando exposições de segurança verdadeiras e atuais a qualquer momento, em qualquer escala. Milhares de profissionais de segurança e prestadores de serviços ao redor do mundo usam a Pentera para guiar a remediação e fechar lacunas de segurança antes que sejam exploradas. Seus clientes incluem Casey's General Stores, Emeria, LuLu International Exchange, IP Telecom PT, BrewDog, City National Bank, Schmitz Cargobull e MBC Group. A Pentera é apoiada por investidores líderes como K1 Investment Management, Insight Partners, Blackstone, Evolution Equity Partners e AWZ. Visite https://pentera.io para mais informações.

**Average Rating:** 4.5/5.0

**Total Reviews:** 171

#### How Do G2 Users Rate Pentera?

- **the product tem sido um bom parceiro comercial?:** 9.3/10 (Category avg: 9.4/10)
- **Desempenho e Confiabilidade:** 8.6/10 (Category avg: 9.2/10)
- **Varredura de vulnerabilidade:** 8.6/10 (Category avg: 9.1/10)
- **Extensibilidade:** 7.4/10 (Category avg: 8.7/10)

#### Who Is the Company Behind Pentera?

- **Vendedor:** [Pentera](https://www.g2.com/pt/sellers/pentera)
- **Website da Empresa:** pentera.io
- **Ano de Fundação:** 2015
- **Localização da Sede:** Boston, MA
- **Twitter:** @penterasec  
3,291 seguidores no Twitter
- **Página do LinkedIn®:** [www.linkedin.com](https://www.g2.com/pt/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=9f2c0c558c875a98d2d9fc35b9d10d7247ea125fd4eaf33d374195bfe744ebba&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fpenterasecurity%2F&secure%5Burl_type%5D=linkedin_company_website)  
483 funcionários no LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Administração Pública, Bancário
- **Company Size:** 52% Large, 36% Medium

#### What Do G2 Reviewers Say About Pentera?

_AI-generated summary from verified user reviews_

##### Pros

- Os usuários valorizam os **recursos de automação** do Pentera, melhorando a facilidade de uso e permitindo uma operação contínua eficiente.
- Os usuários reconhecem a **automação poderosa e as sugestões detalhadas de remediação** do Pentera para uma detecção eficaz de vulnerabilidades.
- Os usuários valorizam as **sugestões eficazes de varredura de vulnerabilidades e remediação** da Pentera, melhorando sua postura geral de segurança e a eficácia dos testes.
- Os usuários valorizam o **suporte ao cliente responsivo** da Pentera, melhorando sua experiência geral de varredura de vulnerabilidades.
- Os usuários apreciam a **eficiência** da Pentera, especialmente por sua rápida implementação e automação que economiza tempo.

##### Cons

- Os usuários acham o **relatório inadequado** , especialmente para avaliações em nível empresarial, necessitando de melhorias significativas.
- Os usuários experimentam uma **falta de recursos essenciais** , incluindo atualizações limitadas de TTP e gerenciamento inadequado de permissões de usuário.
- Os usuários acham que **os relatórios no Pentera são insuficientes** , especialmente para necessidades de nível empresarial e suporte multilíngue.
- Os usuários acham que o Pentera demanda uma **grande quantidade de recursos do sistema** , o que pode prejudicar o desempenho e a eficiência geral.
- Os usuários relatam **problemas técnicos** , particularmente com a compatibilidade de módulos e falhas inesperadas de atualização, embora o suporte seja responsivo.

#### What Are Recent G2 Reviews of Pentera?

**["Ferramenta Confiável para Detecção de Vulnerabilidades, mas Problemas com Script"](https://www.g2.com/pt/survey_responses/pentera-review-12864934)**

**Rating:** 4.0/5.0 stars

_— Avitzur Y._

[Read full review](https://www.g2.com/pt/survey_responses/pentera-review-12864934)

**["Segurança de Ponta com uma Abordagem de Atacante Real"](https://www.g2.com/pt/survey_responses/pentera-review-12864952)**

**Rating:** 4.5/5.0 stars

_— Yaron C._

[Read full review](https://www.g2.com/pt/survey_responses/pentera-review-12864952)

### [Burp Suite](https://www.g2.com/products/burp-suite/reviews)

Burp Suite is a complete ecosystem for web application and API security testing, combining two products: Burp Suite DAST - a best-of-breed, precision DAST solution that automates runtime testing, and Burp Suite Professional - the industry-standard toolkit for manual penetration testing. Developed by PortSwigger, more than 85,000 security professionals rely on Burp Suite to find, verify, and understand vulnerabilities across complex modern web applications. Burp Suite DAST is PortSwigger’s enterprise dynamic application security testing (DAST) solution, purpose-built for continuous, automated scanning of web applications and APIs. Unlike many DAST solutions, which are part of a wider AST offering, Burp Suite DAST is not a bolt-on tool - instead it’s precision-built from over 20 years of dynamic testing experience. Burp Suite DAST reveals the runtime issues that static analysis tools miss, such as authentication flaws, configuration drift, and chained vulnerabilities. Built on the same proprietary scanning engine that powers Burp Suite Professional, it delivers precise, low-noise results that security teams trust. Key capabilities of Burp Suite DAST include: Continuous, automated scanning of web applications and APIs, integration with CI/CD pipelines and vulnerability management tools, flexible deployment across cloud, and on-premise environments, shared scanning logic and configurations between automated and manual testing, accurate, low-noise detection informed by PortSwigger Research. Burp Suite Professional complements DAST with deep manual testing capability. It’s the industry-standard toolkit for penetration testers, consultants, and AppSec engineers who need complete insight and flexibility when validating or exploring vulnerabilities. Findings discovered by DAST can be investigated and verified in Burp Suite Professional, ensuring every result is accurate, contextual, and actionable. Together, Burp Suite DAST and Burp Suite Professional create a unified ecosystem that delivers automation at breadth and manual depth where it counts. Burp Suite is built for AppSec teams who need scalable, trustworthy coverage across web and API environments, enabling a seamless handoff between automated and manual testing.

**Average Rating:** 4.8/5.0

**Total Reviews:** 126

#### How Do G2 Users Rate Burp Suite?

- **Has the product been a good partner in doing business?:** 9.7/10 (Category avg: 9.4/10)
- **Performance and Reliability:** 8.8/10 (Category avg: 9.2/10)
- **Vulnerability Scan:** 8.9/10 (Category avg: 9.1/10)
- **Extensibility:** 8.9/10 (Category avg: 8.7/10)

#### Who Is the Company Behind Burp Suite?

- **Seller:** [PortSwigger](https://www.g2.com/sellers/portswigger)
- **Company Website:** www.portswigger.net
- **Year Founded:** 2008
- **HQ Location:** Knutsford, GB
- **Twitter:** @Burp\_Suite  
138,186 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=89be7395b22b93d4e5529122592390dc29238f493eef5dbfe060e81d512f33b1&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fportswigger-web-security%2F&secure%5Burl_type%5D=linkedin_company_website)  
345 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** Cyber Security Analyst
- **Top Industries:** Computer & Network Security, Information Technology and Services
- **Company Size:** 41% Medium, 31% Small

#### What Do G2 Reviewers Say About Burp Suite?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **ease of use** of Burp Suite, enabling quick setup for both beginners and advanced professionals.
- Users appreciate the **user-friendly interface** of Burp Suite, making penetration testing straightforward and accessible for all levels.
- Users value the **deep automation and manual testing capabilities** of Burp Suite for effective web and Android security testing.
- Users admire the **user-friendly interface** and seamless integration of Burp Suite, enhancing both navigation and testing efficiency.
- Users love the **clear interface** of Burp Suite, enabling effortless traffic interception and easy navigation.

##### Cons

- Users find Burp Suite **expensive** , especially students, limiting accessibility to its powerful features and community support.
- Users report **slow performance** with Burp Suite, particularly on low-spec systems and during resource-intensive scans.
- Users find the **steep learning curve** of Burp Suite challenging, especially for beginners navigating its complex features.
- Users struggle with the **steep learning curve** of Burp Suite, finding it challenging, especially for beginners.
- Users find the **limited customization options** in Burp Suite restrict their ability to tailor the tool to their needs.

#### What Are Recent G2 Reviews of Burp Suite?

**["Complete Control Over Web Requests with Burp Suite"](https://www.g2.com/survey_responses/burp-suite-review-12677559)**

**Rating:** 5.0/5.0 stars

_— Arish B._

[Read full review](https://www.g2.com/survey_responses/burp-suite-review-12677559)

**["Burp Suite Pro: A Powerful, All-in-One Platform for Web App Pen Testing"](https://www.g2.com/survey_responses/burp-suite-review-12818180)**

**Rating:** 4.5/5.0 stars

_— Aryan S._

[Read full review](https://www.g2.com/survey_responses/burp-suite-review-12818180)

#### What Are G2 Users Discussing About Burp Suite?

- [What are the benefits and challenges of using BurpSuite for web application security?](https://www.g2.com/discussions/what-are-the-benefits-and-challenges-of-using-burpsuite-for-web-application-security)
- [What is BurpSuite used for?](https://www.g2.com/discussions/burpsuite-what-is-burpsuite-used-for)
- [What types of vulnerabilities can Burp Suite detect?](https://www.g2.com/discussions/what-types-of-vulnerabilities-can-burp-suite-detect)
- [What is Burp Suite Professional?](https://www.g2.com/discussions/what-is-burp-suite-professional) - 1 comment
- [Is BurpSuite free?](https://www.g2.com/discussions/is-burpsuite-free) - 2 comments

### [YesWeHack](https://www.g2.com/pt/products/yeswehack/reviews)

YesWeHack é uma plataforma líder em Segurança Ofensiva e Gestão de Exposição que oferece soluções integradas baseadas em API para proteger as crescentes superfícies de ataque das organizações. Seu modelo human-in-the-loop combina Bug Bounty (aproveitando uma comunidade global de mais de 150.000 hackers éticos qualificados), Pentesting Autônomo, Pentesting Contínuo e gestão unificada de vulnerabilidades para fornecer testes de segurança ágeis e exaustivos em escala. Os clientes incluem Louis Vuitton, Ferrero, a Comissão Europeia, Tencent e o Grupo L’Oréal. Certificada pela ISO 27001, acreditada pela CREST e hospedada na UE com total conformidade com o GDPR. YesWeHack #1 Plataforma de Bug Bounty na Europa e APAC

**Average Rating:** 4.8/5.0

**Total Reviews:** 33

#### How Do G2 Users Rate YesWeHack?

- **the product tem sido um bom parceiro comercial?:** 9.9/10 (Category avg: 9.4/10)
- **Desempenho e Confiabilidade:** 9.9/10 (Category avg: 9.2/10)
- **Varredura de vulnerabilidade:** 9.4/10 (Category avg: 9.1/10)
- **Extensibilidade:** 9.1/10 (Category avg: 8.7/10)

#### Who Is the Company Behind YesWeHack?

- **Vendedor:** [YesWeHack](https://www.g2.com/pt/sellers/yeswehack)
- **Website da Empresa:** www.yeswehack.com
- **Ano de Fundação:** 2015
- **Localização da Sede:** Paris, France
- **Página do LinkedIn®:** [www.linkedin.com](https://www.g2.com/pt/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=679e5aae70401319c15e7eec013d56bc6fb716e49254994453f4e7ef2e693e49&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fyes-we-hack%2F&secure%5Burl_type%5D=linkedin_company_website)  
728 funcionários no LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Segurança de Redes e Computadores
- **Company Size:** 42% Large, 36% Small

#### What Do G2 Reviewers Say About YesWeHack?

_AI-generated summary from verified user reviews_

##### Pros

- Os usuários acham que o YesWeHack tem uma **plataforma intuitiva** , garantindo uma gestão e comunicação fluídas para o gerenciamento de vulnerabilidades.
- Os usuários valorizam o **suporte ao cliente excepcional** da YesWeHack, melhorando sua experiência com bug bounty e a eficácia da parceria.
- Os usuários admiram o **suporte ao cliente excepcional** e a experiência do usuário intuitiva da plataforma YesWeHack, aumentando o engajamento e a eficiência.
- Os usuários admiram a **alta qualidade dos relatórios de bugs** da YesWeHack, apreciando a clareza e a minuciosidade fornecidas pelos triadores.
- Os usuários valorizam a **qualidade excepcional e o suporte** fornecidos pela equipe da YesWeHack, aprimorando sua experiência com bug bounty.

##### Cons

- Os usuários sentem que o YesWeHack é um pouco **caro** , especialmente para organizações menores que procuram soluções acessíveis.
- Os usuários acham que o **design ruim da interface** do YesWeHack poderia ser melhorado para uma melhor experiência do usuário.
- Os usuários acham o **escopo limitado** do YesWeHack inadequado para lidar com um grande número de programas de forma eficiente.
- Os usuários observam as **funcionalidades de rastreamento ausentes** na interface do YesWeHack, impactando sua eficácia geral, apesar do suporte responsivo.
- Os usuários acham que as **questões de preços** do YesWeHack são elevadas, limitando a acessibilidade para organizações menores.

#### What Are Recent G2 Reviews of YesWeHack?

**["A experiência foi satisfatória"](https://www.g2.com/pt/survey_responses/yeswehack-review-7640568)**

**Rating:** 4.0/5.0 stars

_— Teboho P._

[Read full review](https://www.g2.com/pt/survey_responses/yeswehack-review-7640568)

**["Plataforma de BugBounty confiável!"](https://www.g2.com/pt/survey_responses/yeswehack-review-13153139)**

**Rating:** 5.0/5.0 stars

_— Julien M._

[Read full review](https://www.g2.com/pt/survey_responses/yeswehack-review-13153139)

### [NetSPI](https://www.g2.com/products/netspi-2026-02-04/reviews)

NetSPI PTaaS is a type of penetration testing as a service (PTaaS) solution designed to help organizations identify and remediate vulnerabilities within their systems, applications, and networks. This service utilizes a combination of skilled professionals, established processes, and advanced AI technology to provide contextualized security outcomes in real time, all accessible through a unified platform. By addressing the limitations of traditional penetration testing methods, NetSPI PTaaS offers a more efficient and comprehensive approach to security assessments. This service is targeted at businesses of all sizes, from startups to large enterprises, making it particularly beneficial for security teams looking to enhance their vulnerability management strategies. NetSPI PTaaS caters to a variety of use cases, including application security assessments, infrastructure testing, and evaluations of emerging technologies such as artificial intelligence. With over 50 different types of penetration tests available, including traditional point in time testing and our continuous offerings, organizations can customize their security evaluations to meet specific needs, ensuring thorough coverage across all potential attack surfaces. A key feature of NetSPI PTaaS is its commitment to delivering real-time findings through a single platform. This capability allows security teams to receive immediate insights into vulnerabilities, enabling them to act swiftly to mitigate risks based on role and priority, managing testing in just a few clicks. The platform's integration capabilities enhance its usability, allowing organizations to seamlessly incorporate findings into their existing security workflows. This streamlined approach not only saves time but also ensures that remediation efforts are based on high-fidelity, manually validated findings, thus improving overall security effectiveness. The expertise of NetSPI's team of over 350 in-house security professionals is another significant differentiator. Their extensive experience and knowledge in the field of cybersecurity ensure that the testing methodologies employed are rigorous and consistent, uncovering vulnerabilities, exposures, and misconfigurations that may be overlooked by other solutions. This white-glove approach to penetration testing emphasizes the importance of manual validation, providing organizations with reliable and actionable insights that can significantly enhance their security posture. NetSPI PTaaS stands out in the realm of penetration testing services by combining expert human analysis with advanced AI technology, delivering timely and accurate results. This empowers organizations to strengthen their defenses against evolving cyber threats, ensuring that they remain resilient in an increasingly complex security landscape.

**Average Rating:** 4.9/5.0

**Total Reviews:** 13

#### How Do G2 Users Rate NetSPI?

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.4/10)
- **Performance and Reliability:** 9.8/10 (Category avg: 9.2/10)
- **Vulnerability Scan:** 10.0/10 (Category avg: 9.1/10)
- **Extensibility:** 9.5/10 (Category avg: 8.7/10)

#### Who Is the Company Behind NetSPI?

- **Seller:** [NetSPI](https://www.g2.com/sellers/netspi)
- **Company Website:** www.netspi.com
- **Year Founded:** 2001
- **HQ Location:** Minneapolis, MN
- **Twitter:** @NetSPI  
4,041 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=fc40e8c9ea893c5c5cbba7c0e7c2c446fe731066e4e27af4d2a77540f7888797&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fnetspi%2F&secure%5Burl_type%5D=linkedin_company_website)  
568 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 46% Large, 38% Medium

#### What Do G2 Reviewers Say About NetSPI?

_AI-generated summary from verified user reviews_

##### Pros

- Users commend the **expertise of NetSPI's team** , highlighting their exceptional project management and penetration testing capabilities.
- Users commend the **top-notch team quality** at NetSPI, praising their exceptional support and effective engagement.
- Users value the **effective communication** with NetSPI, ensuring they are always informed throughout the assessment process.
- Users appreciate the **simple and easy-to-use interface** of NetSPI, facilitating smooth communication and project management.
- Users commend the **exceptional service quality** of NetSPI, highlighting their strong leadership and effective tools for engagement.

##### Cons

- Users find the **difficult navigation** in NetSPI frustrating, hindering their overall experience with the platform.
- Users experience **false positives** in vulnerability reports, leading to confusion about affected devices and impacts.
- Users noted that **clarity on impacted devices** in vulnerability reports is often lacking, causing confusion in risk assessment.
- Users criticized the **lack of detail** in vulnerability reports, leading to confusion about affected devices.
- Users face a **lack of clarity** regarding impacted devices in vulnerability reports, leading to confusion and uncertainty.

#### What Are Recent G2 Reviews of NetSPI?

**["Attentive, Knowledgeable NetSPI Specialists with a Truly Human Touch"](https://www.g2.com/survey_responses/netspi-review-12678851)**

**Rating:** 5.0/5.0 stars

_— Verified User in Transportation/Trucking/Railroad_

[Read full review](https://www.g2.com/survey_responses/netspi-review-12678851)

**["Exceptional Pentesting and Seamless Collaboration"](https://www.g2.com/survey_responses/netspi-review-12705364)**

**Rating:** 4.5/5.0 stars

_— Jake B._

[Read full review](https://www.g2.com/survey_responses/netspi-review-12705364)

### [Synack](https://www.g2.com/pt/products/synack/reviews)

Synack é uma plataforma de testes de penetração contínuos que combina IA agente com uma rede global de pesquisadores de segurança verificados para descobrir vulnerabilidades reais e exploráveis em toda a superfície de ataque. A maioria das organizações testa apenas uma fração do que importa. Synack fecha essa lacuna de cobertura—usando IA para escalar a descoberta e a expertise humana para validar riscos reais. A plataforma permite que as empresas passem de testes periódicos para validação contínua de segurança em aplicativos web, APIs, nuvem e infraestrutura—priorizando descobertas com base no que é realmente explorável, não apenas detectado. Synack suporta testes de penetração, testes contínuos de segurança, gerenciamento de vulnerabilidades e gerenciamento de superfície de ataque em ambientes dinâmicos, baseados em nuvem e híbridos. Fundada por ex-profissionais da NSA, a Synack apoia organizações do setor empresarial e público onde segurança, conformidade e gerenciamento de riscos são críticos para a missão.

**Average Rating:** 4.8/5.0

**Total Reviews:** 19

#### How Do G2 Users Rate Synack?

- **the product tem sido um bom parceiro comercial?:** 10.0/10 (Category avg: 9.4/10)
- **Desempenho e Confiabilidade:** 9.2/10 (Category avg: 9.2/10)
- **Varredura de vulnerabilidade:** 10.0/10 (Category avg: 9.1/10)
- **Extensibilidade:** 10.0/10 (Category avg: 8.7/10)

#### Who Is the Company Behind Synack?

- **Vendedor:** [Synack](https://www.g2.com/pt/sellers/synack)
- **Website da Empresa:** www.synack.com
- **Ano de Fundação:** 2013
- **Localização da Sede:** Redwood City, California, United States
- **Twitter:** @synack  
26,716 seguidores no Twitter
- **Página do LinkedIn®:** [www.linkedin.com](https://www.g2.com/pt/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=b167285e8883c4c57362ad8a4e3a053e7023f542ae2b1723068f50dc5c478159&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fsynack-inc-%2F&secure%5Burl_type%5D=linkedin_company_website)  
244 funcionários no LinkedIn®

#### Who Uses This Product?

- **Company Size:** 74% Large, 16% Medium

#### What Are Recent G2 Reviews of Synack?

**["Testes Confiáveis com Análises Poderosas e Garantia"](https://www.g2.com/pt/survey_responses/synack-review-13049363)**

**Rating:** 5.0/5.0 stars

_— Jan F._

[Read full review](https://www.g2.com/pt/survey_responses/synack-review-13049363)

**["Testes de Segurança de Alta Qualidade Através de Pesquisadores Confiáveis"](https://www.g2.com/pt/survey_responses/synack-review-13043980)**

**Rating:** 5.0/5.0 stars

_— Usuário Verificado em Químicos_

[Read full review](https://www.g2.com/pt/survey_responses/synack-review-13043980)

#### What Are G2 Users Discussing About Synack?

- [Para que é usado o Synack?](https://www.g2.com/pt/discussions/what-is-synack-used-for)

### [Intruder](https://www.g2.com/products/intruder/reviews)

Intruder's continuous exposure management platform helps security, IT, and engineering teams stop breaches before they start. By unifying AI penetration testing, attack surface monitoring, cloud security, and vulnerability management in one intuitive platform, Intruder gives stretched teams an always-on security source of truth. Our approach focuses on continuous automated scanning using expertise and agentic solutions to ensure that the findings we deliver are accurate, prioritized by real-world risk, and ready to act on. Founded in 2015 by Chris Wallis, a former ethical hacker turned corporate blue teamer, Intruder is now protecting over 3,000 companies worldwide. Intruder has been awarded multiple accolades, was selected for GCHQ’s Cyber Accelerator, included on Deloitte’s Tech Fast 50 2023 list as the fastest-growing cybersecurity company in the UK and was named in G2’s 2026 Best Software Awards.

**Average Rating:** 4.8/5.0

**Total Reviews:** 209

#### How Do G2 Users Rate Intruder?

- **Has the product been a good partner in doing business?:** 9.7/10 (Category avg: 9.4/10)
- **Performance and Reliability:** 9.4/10 (Category avg: 9.2/10)
- **Vulnerability Scan:** 9.6/10 (Category avg: 9.1/10)
- **Extensibility:** 8.5/10 (Category avg: 8.7/10)

#### Who Is the Company Behind Intruder?

- **Seller:** [Intruder](https://www.g2.com/sellers/intruder)
- **Company Website:** www.intruder.io
- **Year Founded:** 2015
- **HQ Location:** London
- **Twitter:** @intruder\_io  
979 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=f067752387faaf8e51f29bfa65216c4d098142c0465fc0e1e9614d24e55d97f8&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F6443623%2F&secure%5Burl_type%5D=linkedin_company_website)  
84 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CTO, Director
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 57% Small, 36% Medium

#### What Do G2 Reviewers Say About Intruder?

_AI-generated summary from verified user reviews_

##### Pros

- Users find the **ease of use** of Intruder perfect for configuring and scanning cloud resources efficiently.
- Users appreciate the **easy configuration of vulnerability detection** , making it simple to secure cloud resources efficiently.
- Users value the **exceptional customer support** from Intruder, highlighting quick responses and friendliness during their experience.
- Users value Intruder's **easy-to-use interface** and seamless integration, enhancing their cybersecurity management experience significantly.
- Users value the **easy configuration** of Intruder, allowing timely identification of vulnerabilities across cloud resources.

##### Cons

- Users find the service to be **expensive** , suggesting improvements in pricing models for better value.
- Users report **slow scanning** as Intruder misses some vulnerabilities and lacks integration with comprehensive testing tools.
- Users struggle with the **licensing model** of Intruder, finding it complex and not immediately intuitive.
- Users experience **false positives** from Intruder, leading to confusion between critical and lower-risk vulnerabilities.
- Users find the **limited features** of Intruder frustrating, especially regarding reporting flexibility and license understanding.

#### What Are Recent G2 Reviews of Intruder?

**["Reliable Service with Flexible Plans and Strong Support"](https://www.g2.com/survey_responses/intruder-review-13110046)**

**Rating:** 4.0/5.0 stars

_— Ossama M._

[Read full review](https://www.g2.com/survey_responses/intruder-review-13110046)

**["Revolutionized Our Vulnerability Management with Real-Time Insights"](https://www.g2.com/survey_responses/intruder-review-13100568)**

**Rating:** 4.5/5.0 stars

_— Verified User_

[Read full review](https://www.g2.com/survey_responses/intruder-review-13100568)

#### What Are G2 Users Discussing About Intruder?

- [Who developed intruder?](https://www.g2.com/discussions/who-developed-intruder)
- [What is an intruder in cyber security?](https://www.g2.com/discussions/what-is-an-intruder-in-cyber-security)
- [Is intruder IO safe?](https://www.g2.com/discussions/is-intruder-io-safe) - 1 comment
- [What is intruder software?](https://www.g2.com/discussions/what-is-intruder-software) - 1 comment

### [BeEF](https://www.g2.com/products/beef/reviews)

BeEF is short for The Browser Exploitation Framework. It is a penetration testing tool that focuses on the web browser.

**Average Rating:** 4.4/5.0

**Total Reviews:** 11

#### How Do G2 Users Rate BeEF?

- **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 9.4/10)
- **Performance and Reliability:** 8.0/10 (Category avg: 9.2/10)
- **Vulnerability Scan:** 6.3/10 (Category avg: 9.1/10)
- **Extensibility:** 8.6/10 (Category avg: 8.7/10)

#### Who Is the Company Behind BeEF?

- **Seller:** [BeEF](https://www.g2.com/sellers/beef)
- **Year Founded:** 2008
- **HQ Location:** San Francisco, CA
- **Twitter:** @github  
2,673,925 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=7886df2ed926834e5eb248c77dcfa8e5c815d3ab1f0fe3132ced0dba45868834&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2FNo-Linkedin-Presence-Added-Intentionally-By-DataOps&secure%5Burl_type%5D=linkedin_company_website)  
1 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 58% Small, 33% Medium

#### What Are Recent G2 Reviews of BeEF?

**["my Journey with BeEF"](https://www.g2.com/survey_responses/beef-review-6750724)**

**Rating:** 4.5/5.0 stars

_— Animesh R._

[Read full review](https://www.g2.com/survey_responses/beef-review-6750724)

**["Most Capable and Trusted API prsenet in market"](https://www.g2.com/survey_responses/beef-review-6811780)**

**Rating:** 5.0/5.0 stars

_— santosh p._

[Read full review](https://www.g2.com/survey_responses/beef-review-6811780)

#### What Are G2 Users Discussing About BeEF?

- [What is BeEF tool used for?](https://www.g2.com/discussions/beef-what-is-beef-tool-used-for)
- [What is BeEF tool used for?](https://www.g2.com/discussions/what-is-beef-tool-used-for)
- [What is BeEF browser exploitation?](https://www.g2.com/discussions/beef-what-is-beef-browser-exploitation)
- [What is BeEF browser exploitation?](https://www.g2.com/discussions/what-is-beef-browser-exploitation)
- [What is the username and password for BeEF?](https://www.g2.com/discussions/beef-what-is-the-username-and-password-for-beef)

- ‹ Prev‹ Prev
- 1
- [2](/categories/penetration-testing-tools?order=g2_score&page=2#product-list)
- [3](/categories/penetration-testing-tools?order=g2_score&page=3#product-list)
- [4](/categories/penetration-testing-tools?order=g2_score&page=4#product-list)
- [5](/categories/penetration-testing-tools?order=g2_score&page=5#product-list)
- …
- [9](/categories/penetration-testing-tools?order=g2_score&page=9#product-list)
- [10](/categories/penetration-testing-tools?order=g2_score&page=10#product-list)
- [Next ›Next ›](/categories/penetration-testing-tools?order=g2_score&page=2#product-list)

Spotlight Categories

[Anti Money Laundering Software](https://www.g2.com/categories/anti-money-laundering)

[Cloud Content Collaboration Software](https://www.g2.com/categories/cloud-content-collaboration)

[Third Party & Supplier Risk Management Software](https://www.g2.com/categories/third-party-supplier-risk-management)

[Inbound Call Tracking Software](https://www.g2.com/categories/inbound-call-tracking)

[Product Information Management (PIM) Systems](https://www.g2.com/categories/product-information-management-pim)

Similar Categories

- [Static Code Analysis](/categories/static-code-analysis)
- [Container Security](/categories/container-security-tools)
- [Dynamic Application Security Testing (DAST)](/categories/dynamic-application-security-testing-dast)
- [Interactive Application Security Testing (IAST)](/categories/interactive-application-security-testing-iast)

- [Log Analysis](/categories/log-analysis)
- [Secure Code Review](/categories/secure-code-review)
- [Software Bill of Materials (SBOM)](/categories/software-bill-of-materials-sbom)
- [Software Composition Analysis](/categories/software-composition-analysis)

- [Static Application Security Testing (SAST)](/categories/static-application-security-testing-sast)
- [Vulnerability Scanner](/categories/vulnerability-scanner)
- [Web Application Firewall (WAF)](/categories/web-application-firewall-waf)

[Browse Penetration Testing Themes](/categories/penetration-testing-tools/themes)

 ![Lauren Worth](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Lauren Worth")
LW

Researched and written by [Lauren Worth](https://research.g2.com/insights/author/lauren-worth)

Updated March 5, 2025

Penetration testing tools are used to test vulnerabilities within computer systems and applications. These tools work by simulating cyberattacks that target known vulnerabilities as well as general application components in an attempt to breach core systems. Companies conduct penetration tests to uncover new defects and test the security of communication channels and integrations.

While the [best penetration testing tools](https://learn.g2.com/best-penetration-testing-tools) are related to [application security software](https://www.g2.com/categories/application-security) and [vulnerability management software](https://www.g2.com/categories/vulnerability-management), only these tools specifically perform penetration tests. There are also a number of [cybersecurity services providers](https://www.g2.com/categories/security-and-privacy-services) that offer [penetration testing services](https://www.g2.com/categories/penetration-testing-services).

To qualify for inclusion in the Penetration Testing category, a product must:

- Simulate cyberattacks on computer systems or applications
- Gather intelligence on potential known vulnerabilities
- Analyze exploits and report on test outcomes

Show More