Intruder Reviews & Product Details

I like the automated continuous vulnerability scanning with Intruder. It's easy to understand the risk prioritization and the clear reporting, along with the Zero Trust recommendation. The scheduled scanning helps us identify new vulnerabilities and security risks without relying on manual scans and tracking. We've connected Intruder's API with our KPI portal for automatic update reporting, which gives a clear picture of remediation tasks based on criticality. The setup is quite easy to understand and implement—it's like butter and bread. Review collected by and hosted on G2.com.

Sometimes we had an issue with the remediation recommendation scanner output result, which doesn't show clear steps to address the issue. If we can get proper steps along with the path and the redirected URLs which need to updated version of relevant application, it would make implementation and troubleshooting easier. Review collected by and hosted on G2.com.

Intruder makes getting started remarkably frictionless. We were able to plug in our environment and run our first scans within minutes, with virtually zero setup headache or steep learning curve. On top of the ease of use, the pricing is genuinely accessible - especially compared to traditional enterprise security suites. It delivers high-grade vulnerability management at a price point that makes sense for lean teams. Review collected by and hosted on G2.com.

We encountered a few false positives during our initial scans, though the platform makes it quick and painless to review, snooze, and filter them out so they don't clutter future reports. Review collected by and hosted on G2.com.

What Intruder is best at, for us, is the daily cadence combined with rapid response to newly announced CVEs. We get a scan every day as a matter of course, and rather than waiting for the next scheduled run when a new CVE is announced, Intruder kicks off an immediate scan against our systems. That gives us confidence we're not sitting exposed to a known vulnerability for hours or days while waiting on a routine check. Between the daily baseline and the on-demand emergency scans, it works well as both a retrospective health check ("are things still okay") and a proactive early-warning system when something new hits the wild. Review collected by and hosted on G2.com.

If I had to point to something, it would be the UI. There's quite a lot to navigate, and it isn't always obvious what to prioritise right now to move the needle on our security score. A bit more guidance on "here's the one thing to fix next for the biggest score improvement" would go a long way, rather than leaving us to work that out by scanning through the interface ourselves. Review collected by and hosted on G2.com.

Intruder does the core job well: continuous vulnerability scanning across both infrastructure and web apps from a single pane, with attack-surface monitoring that actually flags new exposures instead of just re-reporting the same noise. Setting up authenticated DAST was genuinely painless — the session-cookie approach for authenticated app scanning worked as documented and got us scanning behind login without a lot of trial and error. Findings are prioritized sensibly, so we spend time on what's exploitable rather than triaging a wall of low-severity items. Rolling it out across a multi-project cloud environment was clean, and the reporting is presentable enough to hand to non-security stakeholders and auditors with minimal reformatting. Review collected by and hosted on G2.com.

Authenticated scanning is solid once configured — for more complex apps it took a little manual work to get the session handling dialed in, and a few more edge-case examples in the docs would smooth that out. Licensing is split between infrastructure and application targets, so there's a bit of upfront sizing math to get the mix right across a larger estate, but it's straightforward once you've mapped your targets. Teams wanting very deep customization of scan logic may eventually want a heavier enterprise DAST platform — though for most that added complexity isn't worth trading away Intruder's simplicity. Review collected by and hosted on G2.com.

I use Intruder for vulnerability scanning and annual pentesting. It gives me peace of mind on the evolving CVE landscape and helps me stay abreast of what's happening in the security landscape. I like that issues are almost always genuine, with the best false positive rate I've seen. Its thorough coverage, automatic weekly scanning, and integration with systems like Vanta and Jira for compliance purposes are also really valuable. The initial setup was pretty simple, taking about an hour or so. Review collected by and hosted on G2.com.

The container scanning feature has a lot of potential but could benefit from Github integration to monitor the underlying Dockerfiles Review collected by and hosted on G2.com.

What I like best about Intruder is that it actually works. The scans are thorough and accurate without being a nightmare to manage. We've saved a huge amount of time compared to what we were doing before, which means our team can focus on fixing issues instead of hunting for them.

The reports are clear and detailed, which makes it easy to communicate vulnerabilities to the rest of the business. And honestly, the support has been incredible there's always someone available to help when we need it. The Git integration has made our lives easier too, fitting nicely into our existing workflows.

It's rare to find a tool that's both easy to use and genuinely powerful, but Intruder manages it. Review collected by and hosted on G2.com.

Very little. It does the job exceptionally well, and our team hasn't run into any real pain points. The only thing I'd say is that no tool is perfect for every scenario, but for our vulnerability management and pen testing needs, Intruder has been solid. Review collected by and hosted on G2.com.

Since we were approached by our customers to provide a vulnerability scanning results in Audits, we searched for a solution that will be "set and forget" style and that is exactly what we got. We have provided the tool our public endpoints and pretty much did not touch it ever since. We get regular daily new and weekly scan results and should there be any new thread, we get immediate remedy proposal. The fact that nobody needs to actively watch for new vulnerabilities and all our endpoints are scanned immediately is perhaps the best feature! Review collected by and hosted on G2.com.

Not really anything that we would dislike, perhaps the UI gets rather rich and for casual use I might get lost sometimes. Review collected by and hosted on G2.com.

On day one it identified we have security risks on our website. We spoke to our vendor, and they readily resolved it for us. It makes us feel more secure, knowing it's doing a constant scan of our environment. Review collected by and hosted on G2.com.

We are still only a few weeks into it and don't have anything negative to say at this time. Review collected by and hosted on G2.com.

We primarily use intruder's core scanning product, to scan both on schedules and for emerging threats.

The fact it scans automatically for emerging threats is very handy as we can always be confident we'll get notified if we are vulnerable to a new exploit.

Then being able to produce a report for the hosts we require has been useful during audits. Review collected by and hosted on G2.com.

We have experienced issues where scans were taking longer than expected and we didn't receive any notifications around this, nor was there any useful debugging information we could access to try and diagnose the issue. Review collected by and hosted on G2.com.

Reliable service. They offer a variety of plans that fit different business needs. Customer support and overall service are good. They are also introducing a new platform in the UK that complies with all related laws and regulations. Review collected by and hosted on G2.com.

They aren’t listed as a Cyber Essentials Plus approved vendor, and they really need to address this. Review collected by and hosted on G2.com.