--- title: otto Reviews meta_title: 'otto Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter reviews by the users' company size, role or industry to find out how otto works for a business like yours. aggregate_rating: rating_value: 5.0 review_count: 1 scale: '5' date_modified: '2026-09-22' parent_category: name: Web Security url: https://www.g2.com/categories/web-security ---

otto Reviews & Product Details

otto-js defends your live WebApp against attacks at runtime while continuously monitoring for new risks, vulnerabilities, and out-of-compliant scripts. otto-js is an end-to-end script security & compliance solution for your cross-function team, centralizing the security, compliance, management, reporting & alerting for all your 3rd & Nth-party script dependencies. otto-js gives RegOps, WebOps, SecOps, and DevOps teams the end-to-end unified solution they need to co-manage script security & compliance with ease and speed. 3rd-party scripts and open-source components that may have been tested in the CI/CD pipeline can change, introducing new risks to your security & compliance, leaving your site open to attacks, user data compromise, and costly fines.

Seller

Discussions

Languages Supported

English

Overview by

Maggie Louie (not for everyone)

Pricing

Pricing provided by otto.

Free Risk Assessment

Free

1 Risk Report Every 6 Months

View More Pricing Information

Top-Rated Alternatives

Cloudflare Application Security and Performance

Cloudflare Application Security and Performance

JumpCloud

Vanta

View All Alternatives

SS

sanjay s.

Security Analyst

Small-Business (50 or fewer emp.)

1/3/2023

"Application Security"

5/5

What do you like best about otto?

Application Security is growing as companies started to concentrate on SSDLC. It became mandatory to have a security engineer in every team so in the coming decade skilled Application Security engineers will have a huge demand. Review collected by and hosted on G2.com.

What do you dislike about otto?

I don't dislike anything in application security, but one thing which I find tough is that application security is so vast it will take many years to get hands-on experience in end-to-end security. Review collected by and hosted on G2.com.

What problems is otto solving and how is that benefiting you?

Application Security plays a major role in web, mobile, API, etc., applications, ensuring these applications are well secured so that no security breach can occur. Because we know a security breach can cause huge financial loss to companies. It benefits with lots and lots of opportunities all over the world. Review collected by and hosted on G2.com.

There are not enough reviews of otto for G2 to provide buying insight. Below are some alternatives with more reviews:

Cloudflare Application Security and Performance

Cloudflare Application Security and Performance solutions provide performance, reliability, and security for all of your web applications and APIs, wherever they are hosted and wherever your users are.

The JumpCloud Directory Platform reimagines the directory as a complete platform for identity, access, and device management.

It was clear that security and privacy had become mainstream issues, and that we all increasingly relied on cloud services to store everything from our personal photos to our communications at work. Vanta’s mission is to be the layer of trust on top of these services, and to secure the internet, increase trust in software companies, and keep consumer data safe. Today, we're a growing team in San Francisco passionate about making the internet more secure and elevating the standards for technology companies.

Super-fast, easy to use and free, the Ubuntu operating system powers millions of desktops, netbooks and servers around the world.

Sprinto is an AI-native GRC platform that helps organizations manage compliance, risks, audits, vendor oversight, and continuous monitoring — all from one connected platform. By integrating across an organization’s tech stack and automating compliance workflows, Sprinto helps businesses move from fragmented processes to a single source of truth. Trusted by 3,000+ companies across 75 countries, Sprinto helps organizations stay audit-ready, manage real-time risks, and scale fearlessly with 300+ integrations and AI-driven automation. Sprinto supports 200+ global security standards, including SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and more. Founded in 2020 by second-time founders Girish Redekar and Raghuveer Kancherla, Sprinto powers compliance for companies like Whatfix, Encora, Anaconda, Whatnot, Ultrahuman, WeWork, Everstage, AI Foundation, HackerRank, and many more. From fast-growing startups chasing their first certification to mature enterprises driving proactive risk management, Sprinto enables trust and resilience at every stage of a company’s growth.

Optro's modern connected risk platform is designed to elevate your teams, engage the front lines of your business, and help you leverage risk as a strategic driver. At the heart of our connected risk architecture is a unified data core that centralizes your organization's risks, controls, policies, frameworks, issues, and more. The core is surrounded by a set of powerful platform capabilities, including collaboration, automation, a robust workflow engine, business intelligence, and a highly extensible integration layer. Together, Optro's unified core and purposefully designed platform capabilities set a strong, dynamic foundation for our award-winning applications — RiskOversight, CrossComply, SOXHUB, OpsAudit, ESG, and TPRM.

Drata is the world's most advanced security and compliance automation platform with the mission to help businesses earn and keep the trust of their users, customers, partners, and prospects. With Drata, thousands of companies streamline risk management and over 12 compliance frameworks—such as SOC 2, ISO 27001, GDPR, CCPA, PCI DSS and more—through automation, resulting in a strong security posture, lower costs, and less time spent preparing for audits.

Scrut Automation

Automatically test your cloud configurations against 150+ CIS benchmarks across multiple cloud accounts on AWS, Azure, GCP and more, to maintain a strong infosec posture.

Secureframe helps companies get enterprise ready by streamlining SOC 2 and ISO 27001 compliance. Secureframe allows companies to get compliant within weeks, rather than months and monitors 40+ services, including AWS, GCP, and Azure.

Scytale is the leading AI-powered compliance automation software, including dedicated GRC experts, that streamlines over 40 security and privacy frameworks like SOC 2, ISO 27001, PCI DSS, GDPR and ISO 42001.

Pricing Options

Pricing provided by otto.

Free Risk Assessment

Free

1 Risk Report Every 6 Months

View More Pricing Information

Categories on G2

Security Compliance Website Security Client-Side Protection

Explore More

Which education HR systems provide one-step accreditation report generation from faculty activity records?Top-rated catalog management software for B2B sales What platform supports multi-source log aggregation?

Which board software has the best features for executives TrustArc vs Osano vs Ketch for a company comparing website privacy auditing tools to manage GDPR and CCPA compliance: which covers the widest range of regulations without requiring a dedicated legal team to interpret the results?Snowflake vs ClickHouse for an analytics team: which is worth the setup cost when query volume is high?

Show MoreShow Less