Best API Security Tools

How Many API Security Tools Products Does G2 Track?

Total Products under this Category: 77

Category Stats (Nov 2026)

  • Average Rating: 4.57/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Total Uptime (+1.01%) - Among all products in this category, Total Uptime recorded the largest rating increase compared to last month

Last updated: November 02, 2026

How Does G2 Rank API Security Tools Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 5,600+ Authentic Reviews
  • 77+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for API Security Tools

G2 Grid® for API Security Tools plotting products by satisfaction and market presence

Highlighted products: Postman, Cloudflare Application Security and Performance, Aikido Security, Check Point WAF (formerly CloudGuard WAF), Fastly's Web Application and API Security, apisec.ai, Rakuten SixthSense Observability, and Astra Pentest.

Underlying data: [Grid® JSON](https://www.g2.com/categories/api-security/grids.json?focus%5B%5D=postman&focus%5B%5D=cloudflare-application-security-and-performance&focus%5B%5D=aikido-security&focus%5B%5D=check-point-waf-formerly-cloudguard-waf&focus%5B%5D=fastly-s-web-application-and-api-security&focus%5B%5D=apisec-ai&focus%5B%5D=rakuten-sixthsense-observability&focus%5B%5D=astra-pentest)

Postman

Postman is the world’s leading API platform, used by more than 40 million developers and 500,000 organizations to build, test, and manage APIs at scale. With Postman, teams collaborate efficiently across the entire API lifecycle, including design, development, testing, security, documentation, and governance. The platform helps ensure consistency, quality, and enterprise-grade control. Postman also offers Agent Mode (beta), built on AWS Bedrock and trained with AWS SageMaker. Agent Mode enables developers to use natural language to debug requests, organize collections, document APIs, and automate workflows without switching tools or writing custom scripts.

Average Rating: 4.6/5.0

Total Reviews: 1,759

How Do G2 Users Rate Postman?

  • API Testing: 9.5/10 (Category avg: 9.1/10)
  • API Monitoring: 9.1/10 (Category avg: 8.9/10)

Who Is the Company Behind Postman?

  • Seller: Postman
  • Year Founded: 2014
  • HQ Location: San Francisco, CA
  • LinkedIn® Page: www.linkedin.com
    3,580 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Software Engineer, Software Developer
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 39% Medium, 35% Small

What Do G2 Reviewers Say About Postman?

AI-generated summary from verified user reviews

Pros
  • Users find Postman very easy to use, simplifying API testing and enhancing collaboration with a user-friendly interface.
  • Users find Postman to make API testing simple and efficient, enhancing collaboration and organization for teams.
  • Users appreciate the simplicity and efficiency of Postman for seamless API testing and collaboration within teams.
  • Users value the simplicity and efficiency of Postman for quick and organized API testing, enhancing teamwork and productivity.
  • Users find Postman to greatly enhance testing efficiency, streamlining API testing and promoting effective collaboration.
Cons
  • Users experience slow performance with Postman, particularly when managing multiple requests and collections.
  • Users experience performance issues with Postman, particularly slowdowns when handling large collections and multiple requests.
  • Users experience slow loading issues with Postman, especially when managing multiple requests and large collections.
  • Users experience resource limitations with Postman, noting high CPU/RAM usage and slow performance with large collections.
  • Users often find Postman has limited features in the free version, restricting their ability to fully utilize the tool.

What Are Recent G2 Reviews of Postman?

What Are G2 Users Discussing About Postman?

Cloudflare Application Security and Performance

Cloudflare is the connectivity cloud for the "everywhere world," on a mission to help build a better Internet. We provide a unified platform of networking, security, and developer services delivered from a single, intelligent global network that spans hundreds of cities in over 125 countries. This empowers organizations of all sizes, from small businesses to the world's largest enterprises, to make their employees, applications, and networks faster and more secure everywhere, while significantly reducing complexity and cost. Our comprehensive platform includes: - Advanced Security: Protect your online presence with industry-leading DDoS protection, a robust Web Application Firewall (WAF), Bot mitigation, and API security. Implement Zero Trust security to secure remote access, data, and applications for your entire workforce. - Superior Performance: Accelerate website and application loading times globally with our Content Delivery Network (CDN), intelligent DNS, and smart routing capabilities. Optimize images and deliver dynamic content with unparalleled speed. - Powerful Developer Tools: Empower your developers to build and deploy full-stack applications at the edge using Cloudflare Workers (serverless functions), R2 Storage (object storage without egress fees), and D1 (serverless SQL database). Cloudflare helps connect and protect millions of customers globally, offering the control, visibility, and reliability businesses need to work, develop, and accelerate their operations in today's hyperconnected landscape. Our global network continuously learns and adapts, ensuring your digital assets are always protected and performing at their best.

Average Rating: 4.5/5.0

Total Reviews: 783

How Do G2 Users Rate Cloudflare Application Security and Performance?

  • API Testing: 10.0/10 (Category avg: 9.1/10)
  • API Monitoring: 9.7/10 (Category avg: 8.9/10)

Who Is the Company Behind Cloudflare Application Security and Performance?

  • Seller: Cloudflare, Inc.
  • Company Website:
  • Year Founded: 2009
  • HQ Location: San Francisco, California
  • LinkedIn® Page: www.linkedin.com
    8,094 employees on LinkedIn®
  • Ownership: NYSE: NET

Who Uses This Product?

  • Who Uses This: Web Developer, Software Engineer
  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 62% Small, 27% Medium

What Do G2 Reviewers Say About Cloudflare Application Security and Performance?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the strong security features of Cloudflare Application Security and Performance, enhancing protection against threats effectively.
  • Users appreciate the ease of use of Cloudflare, enjoying its intuitive dashboard and straightforward setup process.
  • Users appreciate the combination of security and performance in Cloudflare, enhancing site speed and protection effortlessly.
  • Users value the combined security and performance features of Cloudflare, enhancing site speed and protection effortlessly.
  • Users value the reliable security and performance of Cloudflare, offering peace of mind and improved website management.
Cons
  • Users find the complex user interface daunting, especially for advanced configurations and navigating powerful features.
  • Users find Cloudflare's services expensive due to advanced features being restricted to higher-tier plans.
  • Users find the complex setup challenging, especially new users navigating advanced configurations and limited feature access.
  • Users find the complexity of configuration challenging, especially when navigating advanced features and pricing options.
  • Users find the learning curve challenging, particularly with complex configurations and limitations on advanced features for new users.

What Are Recent G2 Reviews of Cloudflare Application Security and Performance?

What Are G2 Users Discussing About Cloudflare Application Security and Performance?

Aikido Security

Aikido Security is the developer-first security platform that unifies code, cloud, protection, and attack testing in one suite of best-in-class products. Built by developers for developers, Aikido helps teams of any size ship secure software faster, automate protection, and simulate real-world attacks with AI-driven precision. The platform’s proprietary AI cuts noise by 95%, delivers one-click fixes, and saves developers 10+ hours per week. Aikido Intel proactively uncovers vulnerabilities in open source packages before disclosure, helping secure more than 50,000 organizations worldwide, including Revolut, Niantic, Visma, Montblanc, and GoCardless.

Average Rating: 4.5/5.0

Total Reviews: 272

Who Is the Company Behind Aikido Security?

  • Seller: Aikido Security
  • Company Website:
  • Year Founded: 2022
  • HQ Location: Ghent, Belgium
  • LinkedIn® Page: www.linkedin.com
    320 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Founder, CTO
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 78% Small, 15% Medium

What Do G2 Reviewers Say About Aikido Security?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of Aikido Security, thanks to its clear insights and seamless integration.
  • Users appreciate Aikido Security's robust security capabilities, providing a comprehensive and seamless integration in their workflow.
  • Users value the intuitive dashboard of Aikido Security, which simplifies security issue identification and management.
  • Users value the easy integrations of Aikido Security, enhancing workflows with seamless connections to existing GitLab repositories.
  • Users find Aikido's easy setup highly efficient, enabling quick implementation and immediate usability for security assessments.
Cons
  • Users note the lack of advanced features in Aikido Security, such as dark mode and in-depth analysis options.
  • Users find the pricing structure expensive for micro businesses, making upgrades difficult to justify.
  • Users note the limited features of Aikido Security, wishing for more customization and advanced options.
  • Users find the pricing issues challenging, especially for micro businesses, due to the steep upgrade costs.
  • Users feel Aikido Security is lacking features like advanced reporting and deeper compliance analysis compared to competitors.

What Are Recent G2 Reviews of Aikido Security?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works
Connect G2 to ChatGPTConnect G2 to Claude

Check Point WAF (formerly CloudGuard WAF)

CloudGuard WAF is a cloud-native Web and API security solution designed to help users safeguard their applications from both known and unknown threats. By leveraging advanced contextual AI, this solution provides precise threat prevention without the need for traditional signature-based detection methods. This innovative approach allows organizations to maintain a robust security posture while minimizing the risks associated with evolving cyber threats. Targeted primarily at businesses that rely on web applications and APIs, CloudGuard WAF is particularly beneficial for enterprises in sectors such as finance, healthcare, and e-commerce, where data protection is paramount. The solution is designed to address the complex security challenges that arise in modern application environments, especially those utilizing continuous integration and continuous deployment (CI/CD) practices. As organizations increasingly adopt cloud-native architectures, the need for flexible and efficient security solutions becomes critical. One of the standout features of CloudGuard WAF is its preemptive protection capabilities. By employing machine learning-based security measures, the solution can effectively prevent zero-day threats, which are vulnerabilities that have not yet been discovered or patched. This proactive approach eliminates the reliance on frequent signature updates, allowing organizations to stay ahead of potential attacks without the need for constant manual intervention. Moreover, CloudGuard WAF excels in precise detection, enabling it to identify a broader range of attacks while minimizing the need for ongoing fine-tuning and exception creation. This feature not only enhances the accuracy of threat detection but also reduces the operational burden on security teams, allowing them to focus on more strategic initiatives rather than routine adjustments. Designed with cloud-native principles in mind, CloudGuard WAF supports CI/CD-friendly deployment and automation. This means that organizations can easily integrate the solution into their existing workflows, from installation to upgrades and configuration. By utilizing declarative infrastructure-as-code or APIs, users can streamline their security processes, ensuring that their applications remain protected as they evolve. Overall, CloudGuard WAF represents a significant advancement in the realm of web and API security, offering organizations a sophisticated and adaptable solution to combat the ever-changing landscape of cyber threats. Its combination of preemptive protection, precise detection, and cloud-native design makes it a valuable asset for any organization looking to enhance its security posture in today's digital environment.

Average Rating: 4.3/5.0

Total Reviews: 90

How Do G2 Users Rate Check Point WAF (formerly CloudGuard WAF)?

  • API Testing: 8.7/10 (Category avg: 9.1/10)
  • API Monitoring: 9.0/10 (Category avg: 8.9/10)

Who Is the Company Behind Check Point WAF (formerly CloudGuard WAF)?

Who Uses This Product?

  • Who Uses This: Software Engineer
  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 58% Medium, 27% Small

What Do G2 Reviewers Say About Check Point WAF (formerly CloudGuard WAF)?

AI-generated summary from verified user reviews

Pros
  • Users value the robust protection offered by Check Point WAF against various attacks, ensuring their applications' security effortlessly.
  • Users value the robust security of Check Point CloudGuard WAF, providing effortless protection against threats without expert knowledge.
  • Users value the strong automatic protection of Check Point WAF against threats like SQL injection and DDoS attacks.
  • Users value the proactive DDoS protection of Check Point CloudGuard WAF, effectively shielding sites from various attacks.
  • Users appreciate the strong automatic protection of Check Point WAF, ensuring security without extensive manual configuration.
Cons
  • Users find the complex setup of CloudGuard WAF frustrating, often taking more time than expected to configure effectively.
  • Users find the pricing of Check Point WAF to be premium, which may deter some potential customers.
  • Users note a steep learning curve for Check Point WAF, making initial setup and tuning time-consuming and complex.
  • Users struggle with the difficult learning curve of Check Point WAF, finding initial setup and tuning quite complex.
  • Users note that the poor documentation complicates onboarding and makes advanced configurations challenging to navigate.

What Are Recent G2 Reviews of Check Point WAF (formerly CloudGuard WAF)?

Fastly's Web Application and API Security

Fastly’s AppSec solutions empower teams to mitigate threats and control bots while helping the business move faster, confidently. Protect Your Apps and APIs While Accelerating Growth with Fastly’s Next-Gen WAF, DDoS Protection, Bot Management, API Security, and more. Our solutions are designed to help you stop cyber threats from derailing your biggest moments, accelerate innovation while minimizing new risk, and govern bots without increasing user friction.

Average Rating: 4.2/5.0

Total Reviews: 29

Who Is the Company Behind Fastly's Web Application and API Security?

  • Seller: Fastly
  • Year Founded: 2011
  • HQ Location: San Francisco, California, United States
  • LinkedIn® Page: www.linkedin.com
    1,456 employees on LinkedIn®
  • Ownership: NYSE: FSLY

Who Uses This Product?

  • Top Industries: Computer Software
  • Company Size: 50% Medium, 37% Large

What Do G2 Reviewers Say About Fastly's Web Application and API Security?

AI-generated summary from verified user reviews

Pros
  • Users commend the excellent customer support provided by Fastly, enhancing their experience and implementation process.
  • Users value the effective DDoS protection of Fastly, ensuring robust security against various web application threats.
  • Users value the high detection efficiency of Fastly's security, ensuring robust protection against diverse attacks.
  • Users value the seamless HTTPS integration of Fastly's Web Application and API Security, ensuring a secure experience effortlessly.
  • Users find the setup process easy with Fastly's Web Application and API Security, backed by excellent support.
Cons
  • Users report poor customer support, highlighting issues with responsiveness and difficulty in obtaining assistance for configurations.
  • Users find the complex configuration of Fastly's WAF overwhelming and time-consuming, especially for rule management.
  • Users find the complex setup of Fastly's WAF cumbersome, making rule management and configurations time-consuming.
  • Users find the management complex, as the cumbersome interface and poor support hinder effective rule setup.
  • Users report data inconsistency issues that lead to vulnerabilities in monitoring traffic effectively, affecting overall security.

What Are Recent G2 Reviews of Fastly's Web Application and API Security?

apisec.ai

APIsec automated API testing platform automatically analyzes applications, simulates sophisticated attacks across the full spectrum of OWASP threats, and uncovers vulnerabilities and exploits before they reach production. By eliminating the need for time-consuming manual testing, APIsec helps security and development teams strengthen their security posture with continuous, preventative API protection. In addition, APIsec operates APIsec University, the world’s most popular API security education platform, offering dozens of free courses and a vibrant community of over 100,000 members. Together, our advanced security solutions and educational resources enable organizations to build, deploy, and maintain secure applications with confidence.

Average Rating: 4.7/5.0

Total Reviews: 227

How Do G2 Users Rate apisec.ai?

  • API Testing: 9.0/10 (Category avg: 9.1/10)
  • API Monitoring: 8.7/10 (Category avg: 8.9/10)

Who Is the Company Behind apisec.ai?

  • Seller: apisec.ai
  • Year Founded: 2018
  • HQ Location: San Francisco, US
  • LinkedIn® Page: www.linkedin.com
    41 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Security Consultant, Cyber Security Analyst
  • Top Industries: Computer & Network Security, Information Technology and Services
  • Company Size: 64% Small, 23% Medium

What Do G2 Reviewers Say About apisec.ai?

AI-generated summary from verified user reviews

Pros
  • Users praise apisec.ai's simplicity and effectiveness, finding it invaluable for enhancing API security effortlessly.
  • Users appreciate the ease of use with apisec.ai, finding its tools intuitive and setup seamless for API security testing.
  • Users appreciate the practical, hands-on approach of apisec.ai, making API security accessible for all professionals.
  • Users value the testing efficiency of APIsec.ai, enabling swift identification and resolution of API vulnerabilities.
  • Users love the automation of APIsec.ai, enjoying effortless scanning and time-saving features for multiple projects.
Cons
  • Users face challenges with API issues due to agent installation requirements and limited documentation hindering flexibility and understanding.
  • Users find the complex setup of apisec.ai time-consuming, often needing additional support for configuration.
  • Users express concerns about poor documentation, which hampers effective onboarding and understanding of advanced features.
  • Users face a difficult learning curve for APIsec.ai, particularly with customization and lack of comprehensive documentation.
  • Users feel the pricing is too high, expressing a desire for more affordable learning resources and options.

What Are Recent G2 Reviews of apisec.ai?

Rakuten SixthSense Observability

In today's digital landscape, businesses need a powerful and comprehensive Application Performance Monitoring (APM) solution to stay ahead of the curve. Introducing Rakuten SixthSense Observability - a next-generation APM tool that transforms the way you monitor, analyze, and optimize your applications and infrastructure. With its robust suite of features and advanced analytics, Rakuten SixthSense Observability empowers you to proactively identify and resolve issues, streamline operations, and enhance customer experiences. Key Capabilities: • Comprehensive Monitoring and Alerting: Rakuten SixthSense Observability offers end-to-end monitoring of your applications, infrastructure, and network performance. With real-time alerting and customizable dashboards, you can quickly detect issues and gain actionable insights into the health and performance of your systems. • Distributed Tracing and Correlation: Gain full visibility into your application's performance with distributed tracing, which tracks transactions and requests across multiple services and components. This feature helps you identify bottlenecks, latency issues, and errors, making it easier to optimize your application and enhance customer experiences. • Anomaly Detection and Machine Learning: Leverage Rakuten SixthSense's advanced machine learning capabilities to automatically identify unusual patterns and deviations in application performance and resource utilization. This proactive approach enables you to detect and resolve issues before they impact your business and customers. • Advanced Analytics and Visualization: Rakuten SixthSense's rich data visualization and analytics tools allow you to dive deep into your application performance data. Generate custom reports, analyze trends, and uncover hidden patterns that can drive continuous improvement and optimization. • Log Management and Integration: Effortlessly collect, analyze, and store logs from various sources with Rakuten SixthSense's integrated log management feature. This seamless integration enables you to correlate log data with performance metrics and traces, providing a comprehensive understanding of your application's behaviour. • Scalability and Flexibility: Rakuten SixthSense Observability is built to scale with your growing business needs, supporting a wide range of applications, services, and infrastructure. Its flexible architecture allows you to customize the tool to your specific requirements and integrate it with other monitoring and observability solutions. Current Feature set: • Application Performance Monitoring: Full stack visibility across Java, PHP, Node.js, Python, Go and a lot more! Key Features include, Distributed Tracing, Profiling, Database Monitoring • Infrastructure Monitoring: Get a birds-eye view of your infrastructure health and gain granular insights with easy deployment Key Features include Kubernetes, VMs, Web Servers, Cloud Integrations • Digital Experience Monitoring: Improve the end-user experience of your applications mapped with contextual information of application performance metrics • Browser Monitoring: Metrics to optimize end users’ experience and help in improving application performance. • Mobile Monitoring: Monitor crashes, performance & usage metrics for your mobile applications • Synthetic Monitoring: Stimulate end-user transactions using low code, no code test scripts • VM Monitoring: VM monitoring capability lets you view your infrastructure performance and health of servers, virtual machines, containers, databases etc. at a glance. • SixthSense Cognitive Engine: Modern observability and the proactive approach using artificial intelligence. The application uses different AI/ML algorithms that can predict performance metrics with an accuracy of up to 98% and a confidence level of 90%.

Average Rating: 4.6/5.0

Total Reviews: 52

How Do G2 Users Rate Rakuten SixthSense Observability?

  • API Testing: 9.3/10 (Category avg: 9.1/10)
  • API Monitoring: 10.0/10 (Category avg: 8.9/10)

Who Is the Company Behind Rakuten SixthSense Observability?

Who Uses This Product?

  • Who Uses This: Senior Software Engineer
  • Top Industries: Information Technology and Services, Computer Games
  • Company Size: 47% Large, 38% Medium

What Do G2 Reviewers Say About Rakuten SixthSense Observability?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the deep visibility offered by Rakuten SixthSense, enhancing application performance and proactively managing issues.
  • Users value the effective alerting system for seamless monitoring and quick resolution of issues in one dashboard.
  • Users value the excellent customer support of Rakuten SixthSense, enhancing their overall experience and productivity.
  • Users appreciate the ease of use of Rakuten SixthSense Observability, enabling quick identification of issues without hassle.
  • Users find the implementation ease of Rakuten SixthSense Observability impressive, allowing quick access to essential monitoring tools.
Cons
  • Users find the complex setup of Rakuten SixthSense Observability requires significant onboarding effort for optimal use.
  • Users find the documentation lacking, making onboarding and setup more challenging than necessary.
  • Users often face false positive alerts and desire better functionality for error monitoring and dashboard notifications.
  • Users report experiencing inefficient alerts, citing false positives and a lack of preferred error record displays.
  • Users note that the documentation needs improvement, which impacts their ability to utilize the tool effectively.

What Are Recent G2 Reviews of Rakuten SixthSense Observability?

Astra Pentest

Astra Security is a leading continuous penetration testing platform that combines AI-powered autonomous pentesting with certified expert-led assessments. Powered by Attack AI, trained on 6.8M+ security findings and insights from 5,000+ real-world pentests. Astra deploys intelligent agents that continuously discover, validate, prioritize, and help remediate vulnerabilities at scale. While AI handles speed and scale, Astra’s certified security experts focus on what automation alone cannot: complex business logic flaws, multi-step attack chains, advanced exploit paths, and emerging AI/LLM-specific threats. Built for modern engineering teams, Astra integrates directly into CI/CD workflows, enabling continuous security validation between releases instead of relying on outdated annual pentests. The platform delivers comprehensive Autonomous Pentest powered by AI agents, DAST vulnerability scanner and human-driven pentests across web apps, AI/LLMs, mobile apps, APIs, cloud infrastructure. Astra is CREST-accredited, CERT-IN empaneled, and a PCI ASV-certified vendor. Our team also led the development of the OWASP APTS framework, helping shape the industry standard for continuous security testing. Today, 1,500+ organizations across 70+ countries trust Astra Security, including Ford, Loom, CompTIA, Hitachi, HackerRank, and OLX.

Average Rating: 4.7/5.0

Total Reviews: 264

G2 Deal: For G2 users: 10% off across all pentest plans

Avail Astra Pentest at 10% off, our comprehensive pentest suite scans for 8000+ security tests including OWASP Top 10, SANS 25, known CVEs & security best practices. This offer is exclusive to G2 users!

Price: ~~$5999~~ → $5400

View this exclusive G2 deal

How Do G2 Users Rate Astra Pentest?

  • API Testing: 10.0/10 (Category avg: 9.1/10)
  • API Monitoring: 10.0/10 (Category avg: 8.9/10)

Who Is the Company Behind Astra Pentest?

  • Seller: ASTRA IT, Inc.
  • Company Website:
  • Year Founded: 2018
  • HQ Location: Bengaluru, IN
  • LinkedIn® Page: www.linkedin.com
    154 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CTO, CEO
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 68% Small, 27% Medium

What Do G2 Reviewers Say About Astra Pentest?

AI-generated summary from verified user reviews

Pros
  • Users value the responsive customer support of Astra Pentest, facilitating a smooth and efficient penetration testing process.
  • Users appreciate Astra Pentest's thorough vulnerability detection, praising its clarity, responsiveness, and ease of management.
  • Users appreciate the ease of use of Astra Pentest, enjoying a smooth onboarding process and intuitive interface.
  • Users commend Astra Pentest for its thorough and responsive pentesting efficiency, simplifying vulnerability management with clear guidance.
  • Users value Astra Pentest's thorough vulnerability identification, enjoying clear findings and effective collaboration for easy remediation.
Cons
  • Users express frustration with poor customer support, highlighting delays and lack of transparency in tracking issues.
  • Users note a poor interface design in Astra Pentest, making usability and navigation more challenging than necessary.
  • Users often face slow performance issues, particularly with report speed and initial setup complications during pentesting.
  • Users note that the UX could be improved, particularly regarding the interface's intuitiveness and false positives during scans.
  • Users experience false positives with Astra Pentest, leading to additional clarification and verification time.

What Are Recent G2 Reviews of Astra Pentest?

What Are G2 Users Discussing About Astra Pentest?

Orca Security

Orca Security delivers security for the companies that build. As cloud, applications, AI and app generation expand the attack surface, Orca transforms security risk into the context teams need to act. The Orca Platform provides complete visibility across cloud, AI, and application environments, correlates risk across every layer, and prioritizes the exposures that matter most so organizations can remediate faster and innovate with confidence. Trusted by hundreds of organizations, including SAP, Autodesk, Gannett, Lemonade, and Digital Turbine, Orca is backed by leading investors including Temasek, CapitalG, ICONIQ Capital, and Redpoint Ventures.

Average Rating: 4.7/5.0

Total Reviews: 314

How Do G2 Users Rate Orca Security?

  • API Testing: 7.5/10 (Category avg: 9.1/10)
  • API Monitoring: 8.5/10 (Category avg: 8.9/10)

Who Is the Company Behind Orca Security?

  • Seller: Orca Security
  • Company Website:
  • Year Founded: 2019
  • HQ Location: Portland, Oregon
  • LinkedIn® Page: www.linkedin.com
    523 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Security Engineer, Senior Security Engineer
  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 54% Large, 36% Medium

What Do G2 Reviewers Say About Orca Security?

AI-generated summary from verified user reviews

Pros
  • Users find Orca Security to have a user-friendly interface, making navigation and onboarding exceptionally easy.
  • Users appreciate the rich features and integrations of Orca Security, enhancing visibility and responsiveness to needs.
  • Users value the comprehensive security features of Orca Security, enjoying full visibility and easy implementation.
  • Users appreciate the user-friendly interface of Orca Security, making navigation and integration seamless and straightforward.
  • Users appreciate the enhanced visibility of Orca Security, benefiting from better attack path insights and data posture updates.
Cons
  • Users note significant improvement needed in reporting capabilities and quality of vulnerability validations within Orca Security.
  • Users find feature limitations in Orca Security, citing issues with scheduled reporting and lack of customization options.
  • Users express frustration with the limited features of Orca Security, affecting usability and customization options.
  • Users express dissatisfaction with missing features, such as a cached dashboard and an endpoint agent for non-cloud devices.
  • Users experience ineffective alerts from Orca Security, leading to alert fatigue and missed vulnerabilities in dynamic environments.

What Are Recent G2 Reviews of Orca Security?

What Are G2 Users Discussing About Orca Security?

Harness Platform

Simplify your developer experience with the world's first AI-augmented software delivery platform. Upgrade your software delivery with Harness' innovative CI/CD, Feature Flags, Infrastructure as Code Management, and Chaos Engineering tools. We are a software delivery platform that helps developers and infrastructure engineers build and ship code for cloud and on-premise projects. We automate the continuous integration and continuous delivery (CI/CD) process to help teams build faster, ship more frequently, and improve quality, efficiency, and governance. We help companies in four key areas: Number one, we accelerate innovation through DevOps modernization. We provide an approach for software delivery that automates processes, reduces manual interventions, consolidates tools, and accelerates time-to-market for new products, features, and fixes. Number two, we improve developer experience. We give you the ability to attract, retain, and onboard high-caliber engineering talent while fostering a culture of continuous innovation and improvement. Number three, we secure software delivery. We give you the ability to integrate security into every phase of the SDLC. And last but not least is, we optimize cloud costs. We give you the ability to eliminate waste and to ensure that appropriate cloud resources are allocated at the right place at the right time.

Average Rating: 4.6/5.0

Total Reviews: 330

How Do G2 Users Rate Harness Platform?

  • API Testing: 8.9/10 (Category avg: 9.1/10)
  • API Monitoring: 9.8/10 (Category avg: 8.9/10)

Who Is the Company Behind Harness Platform?

  • Seller: Harness
  • Company Website:
  • Year Founded: 2018
  • HQ Location: San Francisco
  • LinkedIn® Page: www.linkedin.com
    1,832 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Software Engineer, Senior Software Engineer
  • Top Industries: Computer Software, Financial Services
  • Company Size: 41% Large, 40% Medium

What Do G2 Reviewers Say About Harness Platform?

AI-generated summary from verified user reviews

Pros
  • Users find Harness Platform to be easy to use, significantly streamlining deployment management and integrations.
  • Users value the comprehensive features of Harness Platform, facilitating efficient workflows across various DevOps processes.
  • Users value the ease of deploying and testing features with Harness Platform, enhancing workflow and control over experiments.
  • Users appreciate the easy setup of Harness Platform, enabling quick integrations and streamlined workflows for efficient deployment.
  • Users value the easy integrations of the Harness Platform, enhancing their efficiency and adaptability in CI/CD workflows.
Cons
  • Users notice that some essential features are missing from Harness Platform, affecting overall functionality and support.
  • Users find the features immature and desire greater control over data granularity in the Harness Platform.
  • Users find that some features are underdeveloped and essential options are missing, affecting overall satisfaction with Harness Platform.
  • Users find the steep learning curve challenging, especially when adjusting to the platform's numerous features and settings.
  • Users express frustration with the poor UI of Harness Platform, citing clutter and slow navigation as major issues.

What Are Recent G2 Reviews of Harness Platform?

What Are G2 Users Discussing About Harness Platform?

Azion

Azion Platform is a web application platform that helps development, infrastructure, and security teams build, secure, and scale websites, APIs, and AI applications on a fully managed, globally distributed infrastructure. It combines serverless computing, content delivery network (CDN) caching, web application and API protection (WAAP), distributed data storage, and observability in a single platform. Teams manage everything through one console, API, CLI, and Terraform provider. Azion runs on 100+ data centers worldwide and works with origins in public clouds, private data centers, or hybrid environments. Common use cases include accelerating websites and APIs, running e-commerce storefronts, protecting login and checkout flows, keeping applications online when an origin fails, and running AI inference. The platform is used by developers on the free Hobby plan and by enterprises in retail, financial services, media, and technology. Customers include Prime Video, Neon, Global Fashion Group, and Radware. Build applications and AI workloads: - Functions: serverless JavaScript functions with Node.js and Web API compatibility, running on Azion’s distributed infrastructure. - Cache and Application Accelerator: CDN caching for static and dynamic content. It covers personalized pages and API responses, with Tiered Cache, stale cache during origin failures, and Real-Time Purge. - Image Processor: resizes, crops, compresses, and converts images by URL from a single original, with automatic WebP delivery. - AI Inference: runs open-source models, such as LLMs and embedding models, without provisioning GPU infrastructure. - Load Balancer: distributes requests across origins in any cloud or data center, with primary and backup failover. Store application data close to users: - SQL Database: distributed SQL database with vector search. - KV Store: key-value storage for sessions, configuration, and feature flags. - Object Storage: storage for files and static assets, served by the same application that delivers them. Secure applications, APIs, and DNS: - Web Application Firewall (WAF): inspects requests for SQL injection, cross-site scripting (XSS), remote file inclusion, and other attacks. Sensitivity is set per threat family, and a logging mode lets teams test rules before blocking. - Bot Manager: scores each request to detect and stop credential stuffing, account takeover, card testing, and scraping, with seven configurable mitigation actions. - DDoS Protection: always-on mitigation included with Firewall. - Network Shield: allows or blocks traffic by IP address, ASN, or country, using reusable network lists. - Edge DNS: authoritative DNS with DNSSEC and DDoS protection. Observe traffic, performance, and security: - Real-Time Metrics: dashboards for traffic, cache, performance, and security, with 24-month retention and no sampling. - Real-Time Events: searchable request and security event logs, plus Activity History for account changes. - Data Stream: sends logs to SIEM, data warehouse, and storage tools such as Splunk. Azion uses usage-based pricing with published rates. It offers three plans: Hobby (free), Pro, and Enterprise.

Average Rating: 4.7/5.0

Total Reviews: 35

How Do G2 Users Rate Azion?

  • API Testing: 10.0/10 (Category avg: 9.1/10)
  • API Monitoring: 9.2/10 (Category avg: 8.9/10)

Who Is the Company Behind Azion?

  • Seller: Azion
  • Year Founded: 2011
  • HQ Location: Palo Alto, California, United States
  • LinkedIn® Page: www.linkedin.com
    192 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Retail, Information Technology and Services
  • Company Size: 37% Large, 32% Medium

What Do G2 Reviewers Say About Azion?

AI-generated summary from verified user reviews

Pros
  • Users value the fast and reliable customer support from Azion, ensuring assistance whenever needed.
  • Users value the ease of use of Azion, appreciating its responsive support and seamless integration capabilities.
  • Users value the easy integrations of Azion, enhancing performance and providing exceptional support throughout their projects.
  • Users praise Azion for its exceptional reliability, noting fast support and robust protection during critical scenarios.
  • Users commend Azion for its excellent performance and quality, enhancing reliability and building trust in their services.
Cons
  • Users express concern over Azion's missing features for Web3, NFTs, and unprepared products impacting workload efficiency.
  • Users find the complexity of the administration console challenging, requiring time to fully understand its features.
  • Users find the difficult learning curve in Azion's administration console hinders efficient usage and understanding.
  • Users find the difficult learning curve of Azion challenging due to its complex administration console features.
  • Users note the need for more flexibility in pricing, expressing concerns over Azion's high costs.

What Are Recent G2 Reviews of Azion?

Intruder

Intruder's continuous exposure management platform helps security, IT, and engineering teams stop breaches before they start. By unifying AI penetration testing, attack surface monitoring, cloud security, and vulnerability management in one intuitive platform, Intruder gives stretched teams an always-on security source of truth. Our approach focuses on continuous automated scanning using expertise and agentic solutions to ensure that the findings we deliver are accurate, prioritized by real-world risk, and ready to act on. Founded in 2015 by Chris Wallis, a former ethical hacker turned corporate blue teamer, Intruder is now protecting over 3,000 companies worldwide. Intruder has been awarded multiple accolades, was selected for GCHQ’s Cyber Accelerator, included on Deloitte’s Tech Fast 50 2023 list as the fastest-growing cybersecurity company in the UK and was named in G2’s 2026 Best Software Awards.

Average Rating: 4.8/5.0

Total Reviews: 223

How Do G2 Users Rate Intruder?

  • API Testing: 8.7/10 (Category avg: 9.1/10)
  • API Monitoring: 8.9/10 (Category avg: 8.9/10)

Who Is the Company Behind Intruder?

  • Seller: Intruder
  • Company Website:
  • Year Founded: 2015
  • HQ Location: London
  • LinkedIn® Page: www.linkedin.com
    81 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CTO, Director
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 56% Small, 37% Medium

What Do G2 Reviewers Say About Intruder?

AI-generated summary from verified user reviews

Pros
  • Users find Intruder's ease of use essential, appreciating its intuitive setup and minimal maintenance requirements.
  • Users value the easy setup and effective vulnerability detection of Intruder, enhancing their network security swiftly.
  • Users commend Intruder's responsive and friendly customer support, appreciating their fast and effective communication for assistance.
  • Users praise Intruder's intuitive user interface, which simplifies navigation and integrates seamlessly with existing tools.
  • Users appreciate the clarity and prioritisation of Intruder's vulnerability findings, enabling effective and meaningful action against risks.
Cons
  • Users find the expensive pricing a barrier for smaller implementations and prefer a more competitive option.
  • Users are frustrated with the slow scanning speed of Intruder, leading to missed vulnerabilities and increased manual work.
  • Users find licensing issues complicated, with unclear costs and separate application and infrastructure licenses adding to confusion.
  • Users report experiencing false positives with Intruder, leading to extra manual work and missed vulnerabilities.
  • Users find limited features in Intruder, particularly regarding licensing clarity and advanced reporting options.

What Are Recent G2 Reviews of Intruder?

What Are G2 Users Discussing About Intruder?

Escape

Escape automates the full offensive security lifecycle, multiplying the impact of every security engineer tenfold. Our key products: 1. AI Pentesting: Replace manual pentest and bug bounty programs with a solution that scales. 2. Business-logic-aware DAST: Replace legacy DAST with business-logic-aware testing that improves over time and helps your team remediate real, exploitable vulnerabilities. 3. Attack Surface Management: Discover and validate exposure of modern applications, APIs, and infrastructure from code to cloud. Escape is a customer-centric company, supporting more than 2000+ security teams worldwide, and we have the privilege of working with exceptional companies like Schibsted (Media), HealthEquity (Healthcare), Applied (InsurTech), Visma, Miro (Tech), DoubleVerify (AdTech), Thinkific (EdTech), and many others.

Average Rating: 4.9/5.0

Total Reviews: 10

How Do G2 Users Rate Escape?

  • API Testing: 9.2/10 (Category avg: 9.1/10)
  • API Monitoring: 8.5/10 (Category avg: 8.9/10)

Who Is the Company Behind Escape?

  • Seller: Escape
  • Company Website:
  • Year Founded: 2020
  • HQ Location: Paris, France
  • LinkedIn® Page: www.linkedin.com
    76 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 50% Small, 40% Medium

What Do G2 Reviewers Say About Escape?

AI-generated summary from verified user reviews

Pros
  • Users highlight the ease of use of Escape, praising its simple setup and seamless CI/CD integration.
  • Users love the easy integrations with Escape, facilitating smooth workflows and secure GraphQL endpoint checks.
  • Users appreciate the effective scanning technology of Escape, enhancing API security management and vulnerability detection.
  • Users value the strong API security features of Escape, ensuring effective management and detection of vulnerabilities.
  • Users commend Escape for its effective API security management, adeptly identifying various vulnerabilities, including overlooked business logic flaws.
Cons
  • Users find the complex setup of Escape can be a challenge, requiring adjustment to keep up with updates.
  • Users find difficult upgrades sometimes challenging, but appreciate the continuous improvements and security enhancements of the platform.
  • Users note the limited features currently offered, though improvements are promised based on active feedback and updates.
  • Users note missing features in Escape, yet appreciate the roadmap for updates and responsiveness to feedback.
  • Users find update issues occasionally challenging, though the overall tool benefits outweigh these minor inconveniences.

What Are Recent G2 Reviews of Escape?

Qodex.ai

Qodex is a swarm of AI agents that attacks and tests your app 24/7, so your team ships AI-written code without a security or QA team. The problem: your team ships with coding agents, so the code doubles and the people who test and secure it do not. 45% of AI-written code fails OWASP Top 10 security tests (Veracode, 2025). Your pentest is once a year. What Qodex does: a swarm of agents runs against your live app. The largest group tries to break in the way a hacker would: injection, broken auth, one customer seeing another customer's data, the OWASP Top 10 and the OWASP API Top 10, with the exploit reproduced as evidence. The others click through every screen in a real browser and call every API, from an OpenAPI, Swagger or Postman import. How you drive it: describe what to attack or test in plain English and watch it work live. It remembers your app across sessions: auth, quirks, past bugs, your code if you link the repo. What you keep: every test is saved as plain Playwright or HTTP code you own. Saved tests re-run with no AI calls, every night, from CI on every deploy, or from Claude Code and Cursor. When a screen changes, a saved step finds its control again from the intent. What you get back: every failure labelled real bug, stale test or environment problem, with severity, steps and evidence. A security test passes only when the attack was blocked. Start: free plan, no card. Paid from $1,299 per project per month. Managed cloud, AWS Marketplace or self-host.

Average Rating: 4.9/5.0

Total Reviews: 60

How Do G2 Users Rate Qodex.ai?

  • API Testing: 10.0/10 (Category avg: 9.1/10)
  • API Monitoring: 8.3/10 (Category avg: 8.9/10)

Who Is the Company Behind Qodex.ai?

  • Seller: QodexAI
  • Year Founded: 2024
  • HQ Location: San Francisco, California
  • LinkedIn® Page: linkedin.com
    13 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 75% Small, 20% Medium

What Do G2 Reviewers Say About Qodex.ai?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of Qodex.ai, allowing quick adoption and streamlined testing workflows effortlessly.
  • Users value the automation capabilities of Qodex.ai, which streamline AI testing while maintaining high quality and speed.
  • Users praise Qodex.ai for its ability to automate AI-driven testing workflows, significantly reducing manual efforts while ensuring quality.
  • Users appreciate the testing efficiency of Qodex.ai, enabling faster workflows while ensuring high-quality coverage in AI testing.
  • Users appreciate the ease of use and automation in Qodex.ai, simplifying testing processes and enhancing productivity.
Cons
  • Users note that the slow loading times for UI and reports can hinder their overall experience.
  • Users find the poor documentation of Qodex.ai limits their ability to fully utilize advanced features effectively.
  • Users notice slow performance in Qodex.ai, with delays in UI loading and chatbot response times affecting usability.
  • Users report bug issues with repeated test cases, suggesting improvements in tagging and reporting processes.
  • Users experience repeated test case issues and suggest improvements in bug reporting and prioritization.

What Are Recent G2 Reviews of Qodex.ai?

FortiAppSec Cloud

FortiAppSec Cloud - the next evolution of FortiWeb Cloud - simplifies and strengthens web application security and delivery across your cloud environments. This SaaS platform secures network availability and accelerates application performance while delivering consistent security against web-based threats. The AI-driven engine detects zero-day exploits and unknown threats, maximizing detection accuracy while securing the user experience and minimizing false positives. FortiAppSec Cloud is unified platform that provides comprehensive web application and API protection (WAAP) with a single management interface. It includes: • GenAI-ready protection for known and zero-day threat detection • ML-driven bad bot behavioral analysis to fend off sophisticated bots • Advanced API discovery and security • Built-in DAST allows for vulnerability scanning and patching in advance • Global server load balancing and CDN provide optimized application availability and performance. • Threat analytics helps prioritize security events for operational efficiency.

Average Rating: 4.4/5.0

Total Reviews: 29

How Do G2 Users Rate FortiAppSec Cloud?

  • API Testing: 6.7/10 (Category avg: 9.1/10)
  • API Monitoring: 8.3/10 (Category avg: 8.9/10)

Who Is the Company Behind FortiAppSec Cloud?

  • Seller: Fortinet
  • Company Website:
  • Year Founded: 2000
  • HQ Location: Sunnyvale, CA
  • LinkedIn® Page: www.linkedin.com
    16,564 employees on LinkedIn®
  • Ownership: NASDAQ: FTNT

Who Uses This Product?

  • Top Industries: Computer & Network Security, Information Technology and Services
  • Company Size: 61% Medium, 19% Large

What Do G2 Reviewers Say About FortiAppSec Cloud?

AI-generated summary from verified user reviews

Pros
  • Users value FortiAppSec Cloud for its automated security features and user-friendly dashboard for enhanced visibility.
  • Users value the easy implementation and comprehensive security features of FortiAppSec Cloud for effective application protection.
  • Users appreciate the impressive automated protection of FortiAppSec Cloud, effectively handling security threats with minimal manual effort.
  • Users appreciate the ease of use of FortiAppSec Cloud, facilitating quick setup and efficient management of security.
  • Users value the ease of deployment and AI-powered automation in FortiAppSec Cloud, enhancing their web app and API security.
Cons
  • Users find the UI/UX lacking intuitiveness, making the experience challenging, especially when troubleshooting or tuning rules.
  • Users experience slow performance during peak traffic, affecting the overall responsiveness and usability of FortiAppSec Cloud.
  • Users find the user interface issues challenging, mentioning lack of intuitiveness and difficulty in navigating the dashboard.
  • Users struggle with complex configuration during initial setup, which can be overwhelming for first-time users.
  • Users find the initial setup complex, especially for first-time configurations and fine-tuning security policies.

What Are Recent G2 Reviews of FortiAppSec Cloud?

What Are G2 Users Discussing About FortiAppSec Cloud?

Lauren Worth
LW
Researched and written by Lauren Worth
Updated October 3, 2024